EC-Council 312-49v10 Exam (page: 22)
EC-Council Computer Hacking Forensic Investigator
Updated on: 09-Feb-2026

Viewing Page 22 of 138

The ____________________ refers to handing over the results of private investigations to the authorities because of indications of criminal activity.

  1. Locard Exchange Principle
  2. Clark Standard
  3. Kelly Policy
  4. Silver-Platter Doctrine

Answer(s): D



You are working as Computer Forensics investigator and are called by the owner of an accounting rm to investigate possible computer abuse by one of the rm's employees. You meet with the owner of the rm and discover that the company has never published a policy stating that they reserve the right to inspect their computing assets at will.
What do you do?

  1. Inform the owner that conducting an investigation without a policy is not a problem because the company is privately owned
  2. Inform the owner that conducting an investigation without a policy is a violation of the 4th amendment
  3. Inform the owner that conducting an investigation without a policy is a violation of the employee's expectation of privacy
  4. Inform the owner that conducting an investigation without a policy is not a problem because a policy is only necessary for government agencies

Answer(s): C



During the course of a corporate investigation, you nd that an Employee is committing a crime.
Can the Employer le a criminal complaint with Police?

  1. Yes, and all evidence can be turned over to the police
  2. Yes, but only if you turn the evidence over to a federal law enforcement agency
  3. No, because the investigation was conducted without following standard police procedures
  4. No, because the investigation was conducted without warrant

Answer(s): A



____________________ is simply the application of Computer Investigation and analysis techniques in the interests of determining potential legal evidence.

  1. Network Forensics
  2. Computer Forensics
  3. Incident Response
  4. Event Reaction

Answer(s): B



What is the name of the Standard Linux Command that is also available as windows application that can be used to create bit-stream images?

  1. mcopy
  2. image
  3. MD5
  4. dd

Answer(s): D



Viewing Page 22 of 138



Share your comments for EC-Council 312-49v10 exam with other users:

Emmah 7/29/2023 9:59:00 AM

are these valid chfi questions
KENYA


Christopher 9/5/2022 10:54:00 PM

the new versoin of this exam which i downloaded has all the latest questions from the exam. i only saw 3 new questions in the exam which was not in this dump.
CANADA


Aloke Paul 9/11/2023 6:53:00 AM

is this valid for chfiv9 as well... as i am reker 3rd time...
CHINA