Online Access Free 312-49 Practice Test
| Exam Code: | 312-49 |
| Exam Name: | Computer Hacking Forensic Investigator |
| Certification Provider: | EC-COUNCIL |
| Free Question Number: | 150 |
| Posted: | Dec 17, 2025 |
You have been called in to help with an investigation of an alleged network intrusion. After questioning the members of the company ITYou have been called in to help with an investigation of an alleged network intrusion. After questioning the members of the company? IT department, you search through the server log files to find any trace of the intrusion. After that you decide to telnet into one of the company routers to see if there is any evidence to be found. While connected to the router, you see some unusual activity and believe that the attackers are currently connected to that router. You start up an ethereal session to begin capturing traffic on the router that could be used in the investigation. At what layer of the OSI model are you monitoring while watching traffic to and from the router?
A picture file is recovered from a computer under investigation. During the investigation process, the file is enlarged 500% to get a better view of its contents. The picture quality is not degraded at all from this process. What kind of picture is this file?its contents. The picture? quality is not degraded at all from this process. What kind of picture is this file?
When investigating a network that uses DHCP to assign IP addresses, where would you look to determine which system (MAC address) had a specific IP address at a specific time?
When investigating a computer forensics case where Microsoft Exchange and Blackberry
Enterprise server are used, where would investigator need to search to find email sent from a Blackberry device?