312-49v10 Exam Questions and Answers

QUESTION: 111

To preserve digital evidence, an investigator should ____________________.

Make two copies of each evidence item using a single imaging tool
Make a single copy of each evidence item using an approved imaging tool
Make two copies of each evidence item using different imaging tools
Only store the original evidence item

Answer(s): C

Pro ling is a forensics technique for analyzing evidence with the goal of identifying the perpetrator from their various activity. After a computer has been compromised by a hacker, which of the following would be most important in forming a pro le of the incident?

The manufacturer of the system compromised
The logic, formatting and elegance of the code used in the attack
The nature of the attack
The vulnerability exploited in the incident

Answer(s): B

Reveal Solution Next Question

QUESTION: 113

Printing under a Windows Computer normally requires which one of the following les types to be created?

EME
MEM
EMF
CME

Answer(s): C

Reveal Solution Next Question

QUESTION: 114

An Expert witness give an opinion if:

The Opinion, inferences or conclusions depend on special knowledge, skill or training not within the ordinary experience of lay jurors
To de ne the issues of the case for determination by the nder of fact
To stimulate discussion between the consulting expert and the expert witness
To deter the witness form expanding the scope of his or her investigation beyond the requirements of the case

Answer(s): A

Reveal Solution Next Question

QUESTION: 115

When using Windows acquisitions tools to acquire digital evidence, it is important to use a well-tested hardware write-blocking device to:

Automate Collection from image les
Avoiding copying data from the boot partition
Acquire data from host-protected area on a disk
Prevent Contamination to the evidence drive

Answer(s): D

Reveal Solution Next Question

EC-Council 312-49v10 Exam (page: 23)
EC-Council Computer Hacking Forensic Investigator
Updated on: 09-Feb-2026

QUESTION: 111

QUESTION: 112

QUESTION: 113

QUESTION: 114

QUESTION: 115

EC-Council 312-49v10 Exam (page: 23) EC-Council Computer Hacking Forensic Investigator Updated on: 09-Feb-2026

QUESTION: 111

QUESTION: 112

QUESTION: 113

QUESTION: 114

QUESTION: 115

EC-Council 312-49v10 Exam (page: 23)
EC-Council Computer Hacking Forensic Investigator
Updated on: 09-Feb-2026