Free Access EC-COUNCIL.312-49v11.v2025-03-18.q294 Practice Test (Page 5)

Question 16

What is kept in the following directory?
HKLM\SECURITY\Policy\Secrets

A.Service account passwords in plain text

B.Local store PKI Kerberos certificates

C.IAS account names and passwords

D.Cached password hashes for the past 20 users

Question 17

What document does the screenshot represent?

A.Search warrant form

B.Evidence collection form

C.Expert witness form

D.Chain of custody form

Question 18

When cataloging digital evidence, the primary goal is to

A.Not allow the computer to be turned off

B.Preserve evidence integrity

C.Not remove the evidence from the scene

D.Make bit-stream images of all hard drives

Question 19

Billy, a computer forensics expert, has recovered a large number of DBX files during the forensic investigation of a laptop. Which of the following email clients can he use to analyze the DBX files?

A.Microsoft Outlook

B.Mozilla Thunderbird

C.Microsoft Outlook Express

D.Eudora

Question 20

In Windows, prefetching is done to improve system performance. There are two types of prefetching:
boot prefetching and application prefetching.
During boot prefetching, what does the Cache Manager do?

A.Monitors the first 10 seconds after the process is started

B.Checks whether the data is processed

C.Checks hard page faults and soft page faults

D.Determines the data associated with value EnablePrefetcher

Other Version: 1441EC-COUNCIL.312-49v11.v2026-04-30.q214

Latest Upload: 135InsuranceLicensing.InsNV_Health02.v2026-10-23.q44; 206Juniper.JN0-452.v2026-10-23.q141; 265EC-COUNCIL.312-38.v2026-10-22.q321; 134WGU.Health-Fitness-and-Wellness.v2026-10-21.q14; 168ISACA.COBIT-Design-and-Implementation.v2026-10-21.q57; 185NACE.NACE-CIP2-001.v2026-10-21.q36; 244Cisco.400-007.v2026-10-21.q176; 214F5.301a.v2026-10-21.q97; 176Oracle.1z0-1195-26.v2026-10-19.q18; 168Salesforce.Salesforce-Slack-Administrator.v2026-10-19.q126

Question 16

Question 17

Question 18

Question 19

Question 20

Download PDF File