312-49V9 Exam dumps PDF | Exam-Dumps.net (Page: 11)

QUESTION: 51

Which one of the following statements is not correct while preparing for testimony?

Go through the documentation thoroughly
Do not determine the basic facts of the case before beginning and examining the evidence
Establish early communication with the attorney
Substantiate the findings with documentation and by collaborating with other computer forensics professionals

Answer(s): B

Computer security logs contain information about the events occurring within an organization's systems and networks. Application and Web server log files are useful in detecting web attacks. The source, nature, and time of the attack can be determined by _________of the compromised system.

Analyzing log files
Analyzing SAM file
Analyzing rainbow tables
Analyzing hard disk boot records

Answer(s): A

Reveal Solution Next Question

QUESTION: 53

An intrusion detection system (IDS) gathers and analyzes information from within a computer or a network to identify any possible violations of security policy, including unauthorized access, as well as misuse.
Which of the following intrusion detection systems audit events that occur on a specific host?

Network-based intrusion detection
Host-based intrusion detection
Log file monitoring
File integrity checking

Answer(s): B

Reveal Solution Next Question

QUESTION: 54

What is a first sector ("sector zero") of a hard disk?

Master boot record
System boot record
Secondary boot record
Hard disk boot record

Answer(s): A

Reveal Solution Next Question

QUESTION: 55

Ever-changing advancement or mobile devices increases the complexity of mobile device examinations. Which or the following is an appropriate action for the mobile forensic investigation?

To avoid unwanted interaction with devices found on the scene, turn on any wireless interfaces such as Bluetooth and Wi-Fi radios
Do not wear gloves while handling cell phone evidence to maintain integrity of physical evidence
If the device's display is ON. the screen's contents should be photographed and, if necessary, recorded manually, capturing the time, service status, battery level, and other displayed icons
If the phone is in a cradle or connected to a PC with a cable, then unplug the device from the computer

Answer(s): C

Reveal Solution Next Question

EC-Council 312-49V9 Exam (page: 11)
EC-Council ECCouncil Computer Hacking Forensic Investigator (V9)
Updated on: 13-Mar-2026

QUESTION: 51

QUESTION: 52

QUESTION: 53

QUESTION: 54

QUESTION: 55

EC-Council 312-49V9 Exam (page: 11) EC-Council ECCouncil Computer Hacking Forensic Investigator (V9) Updated on: 13-Mar-2026

QUESTION: 51

QUESTION: 52

QUESTION: 53

QUESTION: 54

QUESTION: 55

EC-Council 312-49V9 Exam (page: 11)
EC-Council ECCouncil Computer Hacking Forensic Investigator (V9)
Updated on: 13-Mar-2026