312-49V9 Exam Details

  • Exam Code
    :312-49V9
  • Exam Name
    :EC-Council Certified Computer Hacking Forensic Investigator (V9)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :486 Q&As
  • Last Updated
    :May 26, 2026

EC-COUNCIL 312-49V9 Online Questions & Answers

  • Question 331:

    Kyle is performing the final testing of an application he developed for the accounting department. His last round of testing is to ensure that the program is as secure as possible. Kyle runs the following command. What is he testing at this point? #include #include int main(int argc, char *argv[]) { char buffer[10]; if (argc < 2) { fprintf (stderr, "USAGE: %s string\n", argv[0]); return 1; } strcpy(buffer, argv[1]); return 0; }

    A. SQL injection
    B. Format string bug
    C. Buffer overflow
    D. Kernal injection

  • Question 332:

    This organization maintains a database of hash signatures for known software

    A. International Standards Organization
    B. Institute of Electrical and Electronics Engineers
    C. National Software Reference Library
    D. American National standards Institute

  • Question 333:

    How many bits is Source Port Number in TCP Header packet?

    A. 16
    B. 48
    C. 32
    D. 64

  • Question 334:

    How many sectors will a 125 KB file use in a FAT32 file system?

    A. 32
    B. 16
    C. 250
    D. 25

  • Question 335:

    Printing under a Windows Computer normally requires which one of the following files types to be created?

    A. EME
    B. MEM
    C. EMF
    D. CME

  • Question 336:

    Which table is used to convert huge word lists (i .e. dictionary files and brute-force lists) into password hashes?

    A. Rainbow tables
    B. Hash tables
    C. Master file tables
    D. Database tables

  • Question 337:

    What feature of Windows is the following command trying to utilize?

    A. White space
    B. AFS
    C. ADS
    D. Slack file

  • Question 338:

    You are working in the Security Department of a law firm. One of the attorneys asks you about the topic of sending fake email because he has a client who has been charged with doing just that. His client alleges that he is innocent and that there is no way for a fake email to actually be sent. You inform the attorney that his client is mistaken and that fake email is a possibility and that you can prove it. You return to your desk and craft a fake email to the attorney that appears to come from his boss. What port do you send the email to on the company SMTP server?fake email to the attorney that appears to come from his boss. What port do you send the email to on the company? SMTP server?

    A. 10
    B. 25
    C. 110
    D. 135

  • Question 339:

    System software password cracking is defined as cracking the operating system and all other utilities that enable a computer to function

    A. True
    B. False

  • Question 340:

    You are assigned to work in the computer forensics lab of a state police agency. While working on a high profile criminal case, you have followed every applicable procedure, however your boss is still concerned that the defense attorney might question wheather evidence has been changed while at the lab. What can you do to prove that the evidence is the same as it was when it first entered the lab?

    A. Sign a statement attesting that the evidence is the same as it was when it entered the lab
    B. There is no reason to worry about this possible claim because state labs are certified
    C. Make MD5 hashes of the evidence and compare it to the standard database developed by NIST
    D. Make MD5 hashes of the evidence and compare it with the original MD5 hash that was taken when the evidence first entered the lab

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 312-49V9 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.