Download ECCouncil.312-49v8.Test4Prep.2019-02-25.180q.tqb
| Vendor: | ECCouncil |
| Exam Code: | 312-49v8 |
| Exam Name: | Computer Hacking Forensic Investigator |
| Date: | Feb 25, 2019 |
| File Size: | 1 MB |
Demo Questions
Question 1
What is the First Step required in preparing a computer for forensics investigation?
- Do not turn the computer off or on, run any programs, or attempt to access data on a computer
- Secure any relevant media
- Suspend automated document destruction and recycling policies that may pertain to any relevant media or users at Issue
- Identify the type of data you are seeking, the Information you are looking for, and the urgency level of the examination
Correct answer: A
Question 2
Network forensics can be defined as the sniffing, recording, acquisition and analysis of the network traffic and event logs in order to investigate a network security incident.
- True
- False
Correct answer: A
Question 3
Which of the following commands shows you the names of all open shared files on a server and number of file locks on each file?
- Net sessions
- Net file
- Netconfig
- Net share
Correct answer: B
