Eccouncil 312-49 Exam Questions Instant Access

Question 1

Place the following In order of volatility from most volatile to the least volatile.

ARegisters and cache, routing tables, temporary file systems, disk storage, archival media

BRegister and cache, temporary file systems, routing tables, disk storage, archival media

CRegisters and cache, routing tables, temporary file systems, archival media, disk storage

DArchival media, temporary file systems, disk storage, archival media, register and cache

Answer : C

Question 2

Office Documents (Word, Excel and PowerPoint) contain a code that allows tracking the MAC or unique identifier of the machine that created the document. What is that code called?

AGlobally unique ID

BMicrosoft Virtual Machine Identifier

CPersonal Application Protocol

DIndividual ASCII string

Answer : A

Question 3

Joshua is analyzing an MSSQL database for finding the attack evidence and other details, where should he look for the database logs?

AModel.log

BModel.txt

CModel.ldf

DModel.lgf

Answer : C

Question 4

Which "Standards and Criteria" under SWDGE states that "the agency must use hardware and software that are appropriate and effective for the seizure or examination procedure"?

AStandards and Criteria 1.7

BStandards and Criteria 1.6

CStandards and Criteria 1.4

DStandards and Criteria 1.5

Answer : D

Question 5

Which Linux command when executed displays kernel ring buffers or information about device drivers loaded into the kernel?

Apgrep

Bdmesg

Cfsck

Dgrep

Answer : B

Question 6

Charles has accidentally deleted an important file while working on his Mac computer. He wants to recover the deleted file as it contains some of his crucial business secrets. Which of the following tool will help Charles?

AXplico

BColasoft's Capsa

CFileSalvage

DDriveSpy

Answer : C

Question 7

How many characters long is the fixed-length MD5 algorithm checksum of a critical system file?

A128

B64

C32

D16

Answer : C

Eccouncil Computer Hacking Forensic Investigator V10 312-49 Exam Questions