Confidently Practice Online with Free 312-49 Exam Cram

Practice your Computer Hacking Forensic Investigator certification test with free 312-49 exam cram and take control of your certification preparation. At FreeExamCram, you can practice online for free using real 312-49 exam dumps, verified questions, and expert-designed free online practice tests. Moreover our Eccouncil 312-49 exam cram backed by our confidence-boosting refund guarantee.

Question 1

During the course of an investigation, you locate evidence that may prove the innocence of the suspect of the

investigation. You must maintain an unbiased opinion and be objective in your entire fact finding process.

Therefore, you report this evidence. This type of evidence is known as:

Options :

A : Inculpatory evidence

B : Mandatory evidence

C :

Exculpatory evidence

D :

Terrible evidence

Answer: C

Question 2

Hard disk data addressing is a method of allotting addresses to each _______ of data on a hard disk.

Options :

A :

Physical block

B :

Operating system block

C :

Hard disk block

D :

Logical block

Answer: A

Question 3

An expert witness is a __________________ who is normally appointed by a party to assist the formulation

and preparation of a party’s claim or defense.

Options :

A :

Expert in criminal investigation

B :

Subject matter specialist

C :

Witness present at the crime scene

D :

Expert law graduate appointed by attorney

Answer: B

Question 4

Jacob is a computer forensics investigator with over 10 years of experience in investigations and has written

over 50 articles on computer forensics. He has been called upon as a qualified witness to testify the accuracy

and integrity of the technical log files gathered in an investigation into computer fraud. What is the term used

for Jacob’s testimony in this case?

Options :

A : Certification

B : Justification

C : Reiteration

D : Authentication

Answer: D

Question 5

Consider a scenario where a forensic investigator is performing malware analysis on a memory dump acquired from a victims computer. The investigator uses Volatility Framework to analyze RAM contents; which plugin helps investigator to identify hidden processes or injected code/DLL in the memory dump?

Options :

A : pslist

B : malscan

C : mallist

D : malfind

Answer: D