Free EC0-349 Exam Questions and Answers | by Exam-Dumps.net (Page: 1)

QUESTION: 1

In what way do the procedures for dealing with evidence in a criminal case differ from the procedures for dealing with evidence in a civil case?

evidence procedures are not important unless you work for a law enforcement agency
evidence must be handled in the same way regardless of the type of case
evidence in a civil case must be secured more tightly than in a criminal case
evidence in a criminal case must be secured more tightly than in a civil case

Answer(s): B

Reveal Solution Next Question

QUESTION: 2

Which part of the Windows Registry contains the user's password file?

HKEY_LOCAL_MACHINE
HKEY_CURRENT_CONFIGURATION
HKEY_USER
HKEY_CURRENT_USER

Answer(s): C

Reveal Solution Next Question

QUESTION: 3

If a suspect's computer is located in an area that may have toxic chemicals, you must

coordinate with the HAZMAT team
do not enter alone
assume the suspect machine is contaminated
determine a way to obtain the suspect computer

Answer(s): A

Reveal Solution Next Question

Profiling is a forensics technique for analyzing evidence with the goal of identifying the perpetrator from their pervious activity. After a computer has been compromised by a hacker, which of the following would be most important in forming a profile of the incident?

The vulnerability exploited in the incident
The manufacture of the system compromised
The nature of the attack
The logic, formatting and elegance of the code used in the attack

Answer(s): D

Reveal Solution Next Question

QUESTION: 5

What information do you need to recover when searching a victims computer for a crime committed with specific e-mail message?

Username and password
Firewall log
E-mail header
Internet service provider information

Answer(s): C

Reveal Solution Next Question

EC-Council EC0-349 Exam (page: 1)
EC-Council EC0-349 ECCouncil Computer Hacking Forensic Investigator
Updated on: 12-Aug-2025

Access free EC0-349 actual exam questions, answers, explanations and user discussions.

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

QUESTION: 5

EC-Council EC0-349 Exam (page: 1) EC-Council EC0-349 ECCouncil Computer Hacking Forensic Investigator Updated on: 12-Aug-2025

Access free EC0-349 actual exam questions, answers, explanations and user discussions.

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

QUESTION: 5

EC-Council EC0-349 Exam (page: 1)
EC-Council EC0-349 ECCouncil Computer Hacking Forensic Investigator
Updated on: 12-Aug-2025