Online 312-49v9 Practice TestMore EC-Council Products >

Free EC-Council 312-49v9 Exam Dumps Questions

EC-Council 312-49v9: ECCouncil Computer Hacking Forensic Investigator (V9)

- Get instant access to 312-49v9 practice exam questions

- Get ready to pass the ECCouncil Computer Hacking Forensic Investigator (V9) exam right now using our EC-Council 312-49v9 exam package, which includes EC-Council 312-49v9 practice test plus an EC-Council 312-49v9 Exam Simulator.

- The best online 312-49v9 exam study material and preparation tool is here.

4.5

(5865 ratings)

Question 1

- (Topic 1)
Data Acquisition is the process of imaging or otherwise obtaining information from a digital device and its peripheral equipment and media

A. True

B. False

Correct Answer:A

Question 2

- (Topic 3)
Windows identifies which application to open a file with by examining which of the following?

A. The File extension

B. The file attributes

C. The file Signature at the end of the file

D. The file signature at the beginning of the file

Correct Answer:A

Question 3

- (Topic 1)
Wireless network discovery tools use two different methodologies to detect, monitor and log a WLAN device (i.e. active scanning and passive scanning). Active scanning methodology involves ____ and waiting for responses from available wireless networks.

A. Broadcasting a probe request frame

B. Sniffing the packets from the airwave

C. Scanning the network

D. Inspecting WLAN and surrounding networks

Correct Answer:A

Question 4

- (Topic 3)
What is the following command trying to accomplish? C:> nmap -sU -p445 192.168.0.0/24

A. Verify that TCP port 445 is open for the 192.168.0.0 network

B. Verify that UDP port 445 is open for the 192.168.0.0 network

C. Verify that UDP port 445 is closed for the 192.168.0.0 network

D. Verify that NETBIOS is running for the 192.168.0.0 network

Correct Answer:B

Question 5

- (Topic 3)
Before performing a logical or physical search of a drive in Encase, what must be added to the program?

A. File signatures

B. Keywords

C. Hash sets

D. Bookmarks

Correct Answer:B

Question 6

- (Topic 1)
Damaged portions of a disk on which no read/Write operation can be performed is known as ____ .

A. Lost sector

B. Bad sector

C. Empty sector

D. Unused sector

Correct Answer:B

START 312-49v9 EXAM