312-49V9 Exam Details

  • Exam Code
    :312-49V9
  • Exam Name
    :EC-Council Certified Computer Hacking Forensic Investigator (V9)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :486 Q&As
  • Last Updated
    :May 26, 2026

EC-COUNCIL 312-49V9 Online Questions & Answers

  • Question 211:

    The Apache server saves diagnostic information and error messages that it encounters while processing requests. The default path of this file is usr/local/apache/logs/error.log in Linux. Identify the Apache error log from the following logs.

    A. 127.0.0.1 - frank [10/Oct/2000:13:55:36-0700] "GET /apache_pb.grf HTTP/1.0" 200
    B. [Wed Oct 11 14:32:52 2000] [error] [client 127.0.0.1] client denied by server configuration: /export/home/live/ap/htdocs/test
    C. http://victim.com/scripts/..%c0%af./..%c0%af./..%c0%af./..%c0%af./..%c0%af./..%c0%af./.. %c0%af./..%c0%af./../winnt/system32/cmd.exe?/c+di r+c:\wintt\system32\Logfiles\W3SVC1
    D. 127.0.0.1 --[10/Apr/2007:10:39:11 +0300] ] [error] "GET /apache_pb.gif HTTP/1.0' 200

  • Question 212:

    FAT32 is a 32-bit version of FAT file system using smaller clusters and results in efficient storage capacity. What is the maximum drive size supported?

    A. 1 terabytes
    B. 2 terabytes
    C. 3 terabytes
    D. 4 terabytes

  • Question 213:

    What is the first step that needs to be carried out to investigate wireless attacks?

    A. Obtain a search warrant
    B. Identify wireless devices at crime scene
    C. Document the scene and maintain a chain of custody
    D. Detect the wireless connections

  • Question 214:

    Why should you never power on a computer that you need to acquire digital evidence from?

    A. When the computer boots up, files are written to the computer rendering the data nclean?When the computer boots up, files are written to the computer rendering the data ?nclean
    B. When the computer boots up, the system cache is cleared which could destroy evidence
    C. When the computer boots up, data in the memory buffer is cleared which could destroy evidenceWhen the computer boots up, data in the memory? buffer is cleared which could destroy evidence
    D. Powering on a computer has no affect when needing to acquire digital evidence from it

  • Question 215:

    The MD5 program is used to:

    A. wipe magnetic media before recycling it
    B. make directories on a evidence disk
    C. view graphics files on an evidence drive
    D. verify that a disk is not altered when you examine it

  • Question 216:

    Bill is the accounting manager for Grummon and Sons LLC in Chicago. On a regular basis, he needs to send PDF documents containing sensitive information through E-mail to his customers. Bill protects the PDF documents with a password and sends them to their intended recipients. Why PDF passwords do not offer maximum protection?

    A. PDF passwords are converted to clear text when sent through E-mail
    B. PDF passwords are not considered safe by Sarbanes-Oxley
    C. When sent through E-mail, PDF passwords are stripped from the document completely
    D. PDF passwords can easily be cracked by software brute force tools

  • Question 217:

    You are called in to assist the police in an investigation involving a suspected drug dealer. The police searched the suspect house after aYou are called in to assist the police in an investigation involving a suspected drug dealer. The police searched the suspect? house after a warrant was obtained and they located a floppy disk in the suspect bedroom. The disk contains several files, but they appear to be passwordwarrant was obtained and they located a floppy disk in the suspect? bedroom. The disk contains several files, but they appear to be password protected. What are two common methods used by password cracking software that you could use to obtain the password?

    A. Limited force and library attack
    B. Brute force and dictionary attack
    C. Maximum force and thesaurus attack
    D. Minimum force and appendix attack

  • Question 218:

    A mobile operating system manages communication between the mobile device and other compatible devices like computers, televisions, or printers.

    Which mobile operating system architecture is represented here?

    A. webOS System Architecture
    B. Symbian OS Architecture
    C. Android OS Architecture
    D. Windows Phone 7 Architecture

  • Question 219:

    Web applications provide an Interface between end users and web servers through a set of web pages that are generated at the server-end or contain script code to be executed dynamically within the client Web browser.

    A. True
    B. False

  • Question 220:

    Quality of a raster Image is determined by the _________________and the amount of information in each pixel.

    A. Total number of pixels
    B. Image file format
    C. Compression method
    D. Image file size

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 312-49V9 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.