EC-COUNCIL Computer Hacking Forensic Investigator - 312-49v8 Exam Practice Test
At the time of evidence transfer, both sender and receiver need to give the information about date and time of transfer in the chain of custody record.
Correct Answer: B
Vote an answer
Email archiving is a systematic approach to save and protect the data contained in emails so that it can be accessed fast at a later date. There are two main archive types, namely Local Archive and Server Storage Archive. Which of the following statements is correct while dealing with local archives?
Correct Answer: C
Vote an answer
International Mobile Equipment Identifier (IMEI) is a 15-dlgit number that indicates the manufacturer, model type, and country of approval for GSM devices. The first eight digits of an IMEI number that provide information about the model and origin of the mobile device is also known as:
Correct Answer: A
Vote an answer
Computer security logs contain information about the events occurring within an organization's systems and networks. Application and Web server log files are useful in detecting web attacks. The source, nature, and time of the attack can be determined by _________of the compromised system.
Correct Answer: D
Vote an answer
Volatile information can be easily modified or lost when the system is shut down or rebooted. It helps to determine a logical timeline of the security incident and the users who would be responsible.
Correct Answer: B
Vote an answer
A forensic investigator is a person who handles the complete Investigation process, that is, the preservation, identification, extraction, and documentation of the evidence. The investigator has many roles and responsibilities relating to the cybercrime analysis. The role of the forensic investigator is to:
Correct Answer: B
Vote an answer
According to US federal rules, to present a testimony in a court of law, an expert witness needs to furnish certain information to prove his eligibility. Jason, a qualified computer forensic expert who has started practicing two years back, was denied an expert testimony in a computer crime case by the US Court of Appeals for the Fourth Circuit in Richmond, Virginia. Considering the US federal rules, what could be the most appropriate reason for the court to reject Jason's eligibility as an expert witness?
Correct Answer: C
Vote an answer
Which of the following is the certifying body of forensics labs that investigate criminal cases by analyzing evidence?
Correct Answer: C
Vote an answer
LBA (Logical Block Address) addresses data by allotting a ___________to each sector of the hard disk.
Correct Answer: A
Vote an answer
Which of the following log injection attacks uses white space padding to create unusual log entries?
Correct Answer: A
Vote an answer