EC1-349 Exam Details

  • Exam Code
    :EC1-349
  • Exam Name
    :Computer Hacking Forensic Investigator (CHFI)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :486 Q&As
  • Last Updated
    :Dec 19, 2024

EC-COUNCIL EC1-349 Online Questions & Answers

  • Question 431:

    You are trying to locate Microsoft Outlook Web Access Default Portal using Google search on the Internet. What search string will you use to locate them?

    A. allinurl:"exchange/logon.asp"
    B. intitle:"exchange server"
    C. outlook:"search"
    D. locate:"logon page"

  • Question 432:

    When operating systems mark a cluster as used but not allocated, the cluster is considered as _________

    A. Corrupt
    B. Bad
    C. Lost
    D. Unallocated

  • Question 433:

    Wireless network discovery tools use two different methodologies to detect, monitor and log a WLAN device (i.e. active scanning and passive scanning). Active scanning methodology involves ____________and waiting for responses from available wireless networks.

    A. Broadcasting a probe request frame
    B. Sniffing the packets from the airwave
    C. Scanning the network
    D. Inspecting WLAN and surrounding networks

  • Question 434:

    This type of testimony is presented by someone who does the actual fieldwork and does not offer a view in court.

    A. Civil litigation testimony
    B. Expert testimony
    C. Victim advocate testimony
    D. Technical testimony

  • Question 435:

    How many characters long is the fixed-length MD5 algorithm checksum of a critical system file?

    A. 16
    B. 32
    C. 64
    D. 48

  • Question 436:

    The ____________________ refers to handing over the results of private investigations to the authorities because of indications of criminal activity.

    A. Locard Exchange Principle
    B. Clark Standard
    C. Kelly Policy
    D. Silver-Platter Doctrine

  • Question 437:

    Which device in a wireless local area network (WLAN) determines the next network point to which a packet should be forwarded toward its destination?

    A. Wireless router
    B. Wireless modem
    C. Antenna
    D. Mobile station

  • Question 438:

    When setting up a wireless network with multiple access points, why is it important to set each access point on a different channel?

    A. Avoid over-saturation of wireless signals
    B. So that the access points will work on different requencies
    C. Avoid cross talk
    D. Multiple access points can be set up on the same channel without any issues

  • Question 439:

    An Expert witness gives an opinion if:

    A. The Opinion, inferences or conclusions depend on special knowledge, skill or training not within the ordinary experience of lay jurors
    B. To define the issues of the case for determination by the finder of fact
    C. To stimulate discussion between the consulting expert and the expert witness
    D. To deter the witness form expanding the scope of his or her investigation beyond the requirements of the case

  • Question 440:

    Syslog is a client/server protocol standard for forwarding log messages across an IP network. Syslog uses ___________to transfer log messages in a clear text format.

    A. TCP
    B. FTP
    C. SMTP
    D. POP

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your EC1-349 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.