312-49v11 Exam Questions and Answers

QUESTION: 17

Amber, a black hat hacker, has embedded a malware into a small enticing advertisement and posted it on a popular ad-network that displays across various websites.
What is she doing?

Click-jacking
Compromising a legitimate site
Spearphishing
Malvertising

Answer(s): D

Reveal Solution Next Question

Netstat is a tool for collecting information regarding network connections. It provides a simple view of TCP and

UDP connections, and their state and network traffic statistics.
Which of the following commands shows you the TCP and UDP network connections, listening ports, and the identifiers?

netstat r
netstat ano
netstat b
netstat s

Answer(s): B

Reveal Solution Next Question

QUESTION: 19

Billy, a computer forensics expert, has recovered a large number of DBX files during the forensic investigation of a laptop.
Which of the following email clients can he use to analyze the DBX files?

Microsoft Outlook
Eudora
Mozilla Thunderbird
Microsoft Outlook Express

Answer(s): D

Reveal Solution Next Question

QUESTION: 20

To which phase of the Computer Forensics Investigation Process does the Planning and Budgeting of a Forensics Lab belong?

Post-investigation Phase
Reporting Phase
Pre-investigation Phase
Investigation Phase

Answer(s): C

Reveal Solution Next Question

QUESTION: 21

Identify the file system that uses $BitMap file to keep track of all used and unused clusters on a volume.

NTFS
FAT
EXT
FAT32

Answer(s): A

Reveal Solution Next Question

QUESTION: 22

Which of the following Android libraries are used to render 2D (SGL) or 3D (OpenGL/ES) graphics content to the screen?

OpenGL/ES and SGL
Surface Manager
Media framework
WebKit

Answer(s): A

Reveal Solution Next Question

QUESTION: 23

You are assigned a task to examine the log files pertaining to MyISAM storage engine.
While examining, you are asked to perform a recovery operation on a MyISAM log file.
Which among the following MySQL Utilities allow you to do so?

mysqldump
myisamaccess
myisamlog
myisamchk

Answer(s): C

Reveal Solution Next Question

QUESTION: 24

Gary is checking for the devices connected to USB ports of a suspect system during an investigation. Select the appropriate tool that will help him document all the connected devices.

DevScan
Devcon
fsutil
Reg.exe

Answer(s): B

Reveal Solution Next Question

EC-Council 312-49v11 Exam (page: 3)
EC-Council Computer Hacking Forensic Investigator
Updated on: 07-Feb-2026

QUESTION: 17

QUESTION: 18

QUESTION: 19

QUESTION: 20

QUESTION: 21

QUESTION: 22

QUESTION: 23

QUESTION: 24

EC-Council 312-49v11 Exam (page: 3) EC-Council Computer Hacking Forensic Investigator Updated on: 07-Feb-2026

QUESTION: 17

QUESTION: 18

QUESTION: 19

QUESTION: 20

QUESTION: 21

QUESTION: 22

QUESTION: 23

QUESTION: 24

EC-Council 312-49v11 Exam (page: 3)
EC-Council Computer Hacking Forensic Investigator
Updated on: 07-Feb-2026