Free Access EC-COUNCIL.312-49v9.v2022-04-15.q195 Practice Test (Page 21)

Question 96

Brian needs to acquire data from RAID storage. Which of the following acquisition methods is recommended to retrieve only the data relevant to the investigation?

A.Sparse or Logical Acquisition

B.Static Acquisition

C.Bit-stream disk-to-disk Acquisition

D.Bit-by-bit Acquisition

Question 97

What document does the screenshot represent?

A.Evidence collection form

B.Search warrant form

C.Chain of custody form

D.Expert witness form

Question 98

A forensics investigator is searching the hard drive of a computer for files that were recently moved to the Recycle Bin. He searches for files in C:\RECYCLED using a command line tool but does not find anything.
What is the reason for this?

A.The files are hidden and he must use switch to view them

B.He should search in C:\Windows\System32\RECYCLED folder

C.The Recycle Bin does not exist on the hard drive

D.Only FAT system contains RECYCLED folder and not NTFS

Question 99

Which is a standard procedure to perform during all computer forensics investigations?

A.With the hard drive removed from the suspect PC, check the date and time in the system CMOSWith the hard drive removed from the suspect PC, check the date and time in the system? CMOS

B.With the hard drive in the suspect PC, check the date and time in the system CMOSWith the hard drive in the suspect PC, check the date and time in the system? CMOS

C.With the hard drive in the suspect PC, check the date and time in the File Allocation
Table

D.With the hard drive removed from the suspect PC, check the date and time in the system RAMWith the hard drive removed from the suspect PC, check the date and time in the system? RAM

Question 100

What is the first step that needs to be carried out to investigate wireless attacks?

A.Document the scene and maintain a chain of custody

B.Identify wireless devices at crime scene

C.Obtain a search warrant

D.Detect the wireless connections

Other Version: 2458EC-COUNCIL.312-49v9.v2022-08-12.q138; 44EC-COUNCIL.Actualtestpdf.312-49v9.v2021-12-22.by.poppy.195q.pdf

Latest Upload: 124IAPP.AIGP.v2025-12-25.q64; 118CISI.UAE-Financial-Rules-and-Regulations.v2025-12-25.q35; 138SAP.C-S4TM-2023.v2025-12-25.q82; 110EMC.D-VXR-DS-00.v2025-12-24.q43; 125Splunk.SPLK-5001.v2025-12-24.q37; 125Huawei.H19-308-ENU.v2025-12-24.q74; 109APMG-International.AgilePM-Foundation.v2025-12-24.q74; 141SAP.C-C4H62-2408.v2025-12-24.q81; 116ASHRAE.HFDP.v2025-12-24.q39; 116ISQI.CTFL-UT.v2025-12-23.q13

Question 96

Question 97

Question 98

Question 99

Question 100

Download PDF File