EC1-349 Exam Details

  • Exam Code
    :EC1-349
  • Exam Name
    :Computer Hacking Forensic Investigator (CHFI)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :486 Q&As
  • Last Updated
    :Dec 19, 2024

EC-COUNCIL EC1-349 Online Questions & Answers

  • Question 1:

    What is a good security method to prevent unauthorized users from "tailgating"?

    A. Pick-resistant locks
    B. Electronic key systems
    C. Man trap
    D. Electronic combination locks

  • Question 2:

    An on-site incident response team is called to investigate an alleged case of computer tampering within their company. Before proceeding with the investigation, the CEO informs them that the incident will be classified as ow level? How long will the team have to respond to the incident?the investigation, the CEO informs them that the incident will be classified as ?ow level? How long will the team have to respond to the incident?

    A. One working day
    B. Two working days
    C. Immediately
    D. Four hours

  • Question 3:

    What is the first step taken in an investigation for laboratory forensic staff members?

    A. Packaging the electronic evidence
    B. Securing and evaluating the electronic crime scene
    C. Conducting preliminary interviews
    D. Transporting the electronic evidence

  • Question 4:

    You have been asked to investigate the possibility of computer fraud in the finance department of a company. It is suspected that a staff member has been committing finance fraud by printing cheques that have not been authorized. You have exhaustively searched all data files on a bitmap image of the target computer, but have found no evidence. You suspect the files may not have been saved. What should you examine next in this case?

    A. The registry
    B. The swapfile
    C. The recycle bin
    D. The metadata

  • Question 5:

    The Recycle Bin is located on the Windows desktop. When you delete an item from the hard disk, Windows sends that deleted item to the Recycle Bin and the icon changes to full from empty, but items deleted from removable media, such as a floppy disk or network drive, are not stored in the Recycle Bin.

    What is the size limit for Recycle Bin in Vista and later versions of the Windows?

    A. No size limit
    B. Maximum of 3.99 GB
    C. Maximum of 4.99 GB
    D. Maximum of 5.99 GB

  • Question 6:

    You are called by an author who is writing a book and he wants to know how long the copyright for his book will last after he has the book published?

    A. 70 years
    B. The life of the author
    C. The life of the author plus 70 years
    D. Copyrights last forever

  • Question 7:

    WPA2 provides enterprise and Wi-Fi users with stronger data protection and network access control which of the following encryption algorithm is used DVWPA2?

    A. RC4-CCMP
    B. RC4-TKIP
    C. AES-CCMP
    D. AES-TKIP

  • Question 8:

    Travis, a computer forensics investigator, is finishing up a case he has been working on for over a month involving copyright infringement and embezzlement. His last task is to prepare an investigative report for the president of the company he has been working for. Travis must submit a hard copy and an electronic copy to this president. In what electronic format should Travis send this report?

    A. TIFF-8
    B. DOC
    C. WPD
    D. PDF

  • Question 9:

    Michael works for Kimball Construction Company as senior security analyst. As part of yearly security audit, Michael scans his network for vulnerabilities. Using Nmap, Michael conducts XMAS scan and most of the ports scanned do not give a response. In what state are these ports?

    A. Filtered
    B. Closed
    C. Open
    D. Stealth

  • Question 10:

    Which of the following Steganography techniques allows you to encode information that ensures creation of cover for secret communication?

    A. Substitution techniques
    B. Transform domain techniques
    C. Cover generation techniques
    D. Spread spectrum techniques

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your EC1-349 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.