EC-Council 312-49v10 Exam (page: 3)
EC-Council Computer Hacking Forensic Investigator
Updated on: 25-Dec-2025

Viewing Page 3 of 138

You are working for a large clothing manufacturer as a computer forensics investigator and are called in to investigate an unusual case of an employee possibly stealing clothing designs from the company and selling them under a different brand name for a different company.
What you discover during the course of the investigation is that the clothing designs are actually original products of the employee and the company has no policy against an employee selling his own designs on his own time. The only thing that you can nd that the employee is doing wrong is that his clothing design incorporates the same graphic symbol as that of the company with only the wording in the graphic being different.
What area of the law is the employee violating?

  1. trademark law
  2. copyright law
  3. printright law
  4. brandmark law

Answer(s): A



What le structure database would you expect to nd on oppy disks?

  1. NTFS
  2. FAT32
  3. FAT16
  4. FAT12

Answer(s): D



What type of attack occurs when an attacker can force a router to stop forwarding packets by ooding the router with many open connections simultaneously so that all the hosts behind the router are effectively disabled?

  1. digital attack
  2. denial of service
  3. physical attack
  4. ARP redirect

Answer(s): B



When examining a le with a Hex Editor, what space does the le header occupy?

  1. the last several bytes of the le
  2. the rst several bytes of the le
  3. none, le headers are contained in the FAT
  4. one byte at the beginning of the le

Answer(s): D



In the context of le deletion process, which of the following statement holds true?


  1. When les are deleted, the data is overwritten and the cluster marked as available
  2. The longer a disk is in use, the less likely it is that deleted les will be overwritten
  3. While booting, the machine may create temporary les that can delete evidence
  4. Secure delete programs work by completely overwriting the le in one go

Answer(s): C



Viewing Page 3 of 138



Share your comments for EC-Council 312-49v10 exam with other users:

Emmah 7/29/2023 9:59:00 AM

are these valid chfi questions
KENYA


Christopher 9/5/2022 10:54:00 PM

the new versoin of this exam which i downloaded has all the latest questions from the exam. i only saw 3 new questions in the exam which was not in this dump.
CANADA


Aloke Paul 9/11/2023 6:53:00 AM

is this valid for chfiv9 as well... as i am reker 3rd time...
CHINA