EC-COUNCIL Computer Hacking Forensic Investigator (CHFI-v10) - 312-49v10 Exam Practice Test
Adam Is thinking of establishing a hospital In the US and approaches John, a software developer to build a site and host it for him on one of the servers, which would be used to store patient health records. He has learned from his legal advisors that he needs to have the server's log data reviewed and managed according to certain standards and regulations. Which of the following regulations are the legal advisors referring to?
Correct Answer: A
Vote an answer
What system details can an investigator obtain from the NetBIOS name table cache?
Correct Answer: D
Vote an answer
You are working as a Computer forensics investigator for a corporation on a computer abuse case. You discover evidence that shows the subject of your investigation is also embezzling money from the company. The company CEO and the corporate legal counsel advise you to contact law enforcement and provide them with the evidence that you have found. The law enforcement officer that responds requests that you put a network sniffer on your network and monitor all traffic to the subject's computer. You inform the officer that you will not be able to comply with that request because doing so would:
Correct Answer: D
Vote an answer
What is the primary function of the tool CHKDSK in Windows that authenticates the file system reliability of a volume?
Correct Answer: D
Vote an answer
Depending upon the jurisdictional areas, different laws apply to different incidents. Which of the following law is related to fraud and related activity in connection with computers?
Correct Answer: C
Vote an answer
If a suspect computer is located in an area that may have toxic chemicals, you must:
Correct Answer: C
Vote an answer
A picture file is recovered from a computer under investigation. During the investigation process, the file is enlarged 500% to get a better view of its contents. The picture quality is not degraded at all from this process. What kind of picture is this file. What kind of picture is this file?
Correct Answer: A
Vote an answer
Jim performed a vulnerability analysis on his network and found no potential problems. He runs another utility that executes exploits against his system to verify the results of the vulnerability test.
The second utility executes five known exploits against his network in which the vulnerability analysis said were not exploitable. What kind of results did Jim receive from his vulnerability analysis?
The second utility executes five known exploits against his network in which the vulnerability analysis said were not exploitable. What kind of results did Jim receive from his vulnerability analysis?
Correct Answer: C
Vote an answer
You are assisting in the investigation of a possible Web Server Hack. The company who called you stated that customers reported to them that whenever they entered the web address of the company in their browser, what they received was a porno graphic web site. The company checked the web server and nothing appears wrong. When you type in the IP address of the web site in your browser everything appears normal. What is the name of the attack that affects the DNS cache of the name resolution servers, resulting in those servers directing users to the wrong web site?
Correct Answer: B
Vote an answer
Richard is extracting volatile data from a system and uses the command doskey/history. What is he trying to extract?
Correct Answer: D
Vote an answer
When investigating a Windows System, it is important to view the contents of the page or swap file because:
Correct Answer: D
Vote an answer
You are a Penetration Tester and are assigned to scan a server. You need to use a scanning technique wherein the TCP Header is split into many packets so that it becomes difficult to detect what the packets are meant for. Which of the below scanning technique will you use?
Correct Answer: D
Vote an answer