EC-Council 312-49v10 Exam (page: 26)
EC-Council Computer Hacking Forensic Investigator
Updated on: 09-Feb-2026

Viewing Page 26 of 138

You are assisting in the investigation of a possible Web Server Hack. The company who called you stated that customers reported to them that whenever they entered the web address of the company in their browser, what they received was a porno graphic web site. The company checked the web server and nothing appears wrong.
When you type in the IP address of the web site in your browser everything appears normal.
What is the name of the attack that affects the DNS cache of the name resolution servers, resulting in those servers directing users to the wrong web site?

  1. ARP Poisoning
  2. DNS Poisoning
  3. HTTP redirect attack
  4. IP Spoo ng

Answer(s): B



Analyze the hex representation of mysql-bin.000013 le in the screenshot below. Which of the following will be an inference from this analysis?

  1. A user with username bad_guy has logged into the WordPress web application
  2. A WordPress user has been created with the username anonymous_hacker
  3. An attacker with name anonymous_hacker has replaced a user bad_guy in the WordPress database
  4. A WordPress user has been created with the username bad_guy

Answer(s): D



Law enforcement o cers are conducting a legal search for which a valid warrant was obtained. While conducting the search, o cers observe an item of evidence for an unrelated crime that was not included in the warrant. The item was clearly visible to the o cers and immediately identi ed as evidence.
What is the term used to describe how this evidence is admissible?

  1. Plain view doctrine
  2. Corpus delicti
  3. Locard Exchange Principle
  4. Ex Parte Order

Answer(s): A



Microsoft Outlook maintains email messages in a proprietary format in what type of le?

  1. .email
  2. .mail
  3. .pst
  4. .doc

Answer(s): C



The efforts to obtain information before a trail by demanding documents, depositions, questioned and answers written under oath, written requests for admissions of fact and examination of the scene is a description of what legal term?

  1. Detection
  2. Hearsay
  3. Spoliation
  4. Discovery

Answer(s): D



Viewing Page 26 of 138



Share your comments for EC-Council 312-49v10 exam with other users:

Emmah 7/29/2023 9:59:00 AM

are these valid chfi questions
KENYA


Christopher 9/5/2022 10:54:00 PM

the new versoin of this exam which i downloaded has all the latest questions from the exam. i only saw 3 new questions in the exam which was not in this dump.
CANADA


Aloke Paul 9/11/2023 6:53:00 AM

is this valid for chfiv9 as well... as i am reker 3rd time...
CHINA