Online 312-49v10 Practice TestMore EC-Council Products >

Free EC-Council 312-49v10 Exam Dumps Questions

EC-Council 312-49v10: Computer Hacking Forensic Investigator (CHFI-v10)

- Get instant access to 312-49v10 practice exam questions

- Get ready to pass the Computer Hacking Forensic Investigator (CHFI-v10) exam right now using our EC-Council 312-49v10 exam package, which includes EC-Council 312-49v10 practice test plus an EC-Council 312-49v10 Exam Simulator.

- The best online 312-49v10 exam study material and preparation tool is here.

4.5

(2970 ratings)

Question 1

- (Exam Topic 3)
Which part of Metasploit framework helps users to hide the data related to a previously deleted file or currently unused by the allocated file.

A. Waffen FS

B. RuneFS

C. FragFS

D. Slacker

Correct Answer:D

Question 2

- (Exam Topic 3)
Which of the following is a precomputed table containing word lists like dictionary files and brute force lists and their hash values?

A. Directory Table

B. Rainbow Table

C. Master file Table (MFT)

D. Partition Table

Correct Answer:B

Question 3

- (Exam Topic 2)
Richard is extracting volatile data from a system and uses the command doskey/history. What is he trying to extract?

A. Events history

B. Previously typed commands

C. History of the browser

D. Passwords used across the system

Correct Answer:B

Question 4

- (Exam Topic 1)
When examining a file with a Hex Editor, what space does the file header occupy?

A. the last several bytes of the file

B. the first several bytes of the file

C. none, file headers are contained in the FAT

D. one byte at the beginning of the file

Correct Answer:D

Question 5

- (Exam Topic 2)
Which among the following files provides email header information in the Microsoft Exchange server?

A. gwcheck.db

B. PRIV.EDB

C. PUB.EDB

D. PRIV.STM

Correct Answer:B

Question 6

- (Exam Topic 1)
George is a senior security analyst working for a state agency in Florida. His state's congress just passed a bill mandating every state agency to undergo a security audit annually. After learning what will be required, George needs to implement an IDS as soon as possible before the first audit occurs. The state bill requires that an IDS with a "time-based induction machine" be used.
What IDS feature must George implement to meet this requirement?

A. Signature-based anomaly detection

B. Pattern matching

C. Real-time anomaly detection

D. Statistical-based anomaly detection

Correct Answer:C

START 312-49v10 EXAM