Free EC0-349 Questions for EC-COUNCIL Computer Hacking Forensic Investigator EC0-349 Exam as PDF & Practice Test Engine
Raw data acquisition format creates ____________of a data set or suspect drive.
Correct Answer: C
Vote an answer
Under confession, an accused criminal admitted to encrypting child pornography pictures and then hiding them within other pictures. What technique did the accused criminal employ?
Correct Answer: D
Vote an answer
Which table is used to convert huge word lists (i .e. dictionary files and brute-force lists) into password hashes?
Correct Answer: D
Vote an answer
When a file is deleted by Windows Explorer or through the MS-DOS delete command, the operating system inserts _______________ in the first letter position of the filename in the FAT database.
Correct Answer: D
Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
Which of the following statement is not correct when dealing with a powered-on computer at the crime scene?
Correct Answer: C
Vote an answer
When investigating a network that uses DHCP to assign IP addresses, where would you look to determine which system (MAC address) had a specific IP address at a specific time?
Correct Answer: A
Vote an answer
The Recycle Bin exists as a metaphor for throwing files away, but it also allows user to retrieve and restore files. Once the file is moved to the recycle bin, a record is added to the log file that exists in the Recycle Bin.
Which of the following files contains records that correspond to each deleted file in the Recycle Bin?
Which of the following files contains records that correspond to each deleted file in the Recycle Bin?
Correct Answer: C
Vote an answer
Consistency in the investigative report is more important than the exact format in the report to eliminate uncertainty and confusion.
Correct Answer: B
Vote an answer
What information do you need to recover when searching a victim computer for a crime committed with specific e-mail message?What information do you need to recover when searching a victim? computer for a crime committed with specific e-mail message?
Correct Answer: C
Vote an answer
0
0
0
10