312-49V9 Exam Details

  • Exam Code
    :312-49V9
  • Exam Name
    :EC-Council Certified Computer Hacking Forensic Investigator (V9)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :486 Q&As
  • Last Updated
    :May 26, 2026

EC-COUNCIL 312-49V9 Online Questions & Answers

  • Question 151:

    What will the following command accomplish? C:\> nmap -v -sS -Po 172.16.28.251 - data_length 66000 packet_trace

    A. Test the ability of a router to handle under-sized packets
    B. Test ability of a router to handle over-sized packets
    C. Test the ability of a WLAN to handle fragmented packets
    D. Test the ability of a router to handle fragmented packets

  • Question 152:

    Given the drive dimensions as follows and assuming a sector has 512 bytes, what is the capacity of the described hard drive? 22,164 cylinders/disk 80 heads/cylinder 63 sectors/track

    A. 53.26 GB
    B. 57.19 GB
    C. 11.17 GB
    D. 10 GB

  • Question 153:

    Log management includes all the processes and techniques used to collect, aggregate, and analyze computer-generated log messages. It consists of the hardware, software, network and media used to generate, transmit, store, analyze, and dispose of log data.

    A. True
    B. False

  • Question 154:

    Windows identifies which application to open a file with by examining which of the following?

    A. The File extension
    B. The file attributes
    C. The file Signature at the end of the file
    D. The file signature at the beginning of the file

  • Question 155:

    In the following email header, where did the email first originate from?

    A. Somedomain.com
    B. Smtp1.somedomain.com
    C. Simon1.state.ok.gov.us
    D. David1.state.ok.gov.us

  • Question 156:

    Which of the following is NOT a graphics file?

    A. Picture1.tga
    B. Picture2.bmp
    C. Picture3.nfo
    D. Picture4.psd

  • Question 157:

    What type of file is represented by a colon (:) with a name following it in the Master File Table (MFT) of an NTFS disk?

    A. Compressed file
    B. Data stream file
    C. Encrypted file
    D. Reserved file

  • Question 158:

    Data acquisition system is a combination of tools or processes used to gather, analyze and record Information about some phenomenon. Different data acquisition system are used depends on the location, speed, cost. etc. Serial communication data acquisition system is used when the actual location of the data is at some distance from the computer. Which of the following communication standard is used in serial communication data acquisition system?

    A. RS422
    B. RS423
    C. RS232
    D. RS231

  • Question 159:

    If a file (readme.txt) on a hard disk has a size of 2600 bytes, how many sectors are normally allocated to this file?

    A. 4 Sectors
    B. 5 Sectors
    C. 6 Sectors
    D. 7 Sectors

  • Question 160:

    The need for computer forensics is highlighted by an exponential increase in the number of cybercrimes and litigations where large organizations were involved. Computer forensics plays an important role in tracking the cyber criminals. The main role of computer forensics is to:

    A. Maximize the investigative potential by maximizing the costs
    B. Harden organization perimeter security
    C. Document monitoring processes of employees of the organization
    D. Extract, process, and interpret the factual evidence so that it proves the attacker's actions in the court

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 312-49V9 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.