[Q122-Q142] Pass EC-COUNCIL 312-49v10 Exam in First Attempt Guaranteed [Mar-2023]

NEW QUESTION 122
Which of the following file system is used by Mac OS X?

NEW QUESTION 123
Fill In the missing Master Boot Record component.
1. Master boot code
2. Partition table
3._______________

NEW QUESTION 124
While looking through the IIS log file of a web server, you find the following entries:

What is evident from this log file?

NEW QUESTION 125
What type of flash memory card comes in either Type I or Type II and consumes only five percent of the power required by small hard drives?

NEW QUESTION 126
An investigator enters the command sqlcmd -S WIN-CQQMK62867E -e -s”,” -E as part of collecting the primary data file and logs from a database. What does the “WIN-CQQMK62867E” represent?

NEW QUESTION 127
Under confession, an accused criminal admitted to encrypting child pornography pictures and then hiding them within other pictures. What technique did the accused criminal employ?

NEW QUESTION 128
A Linux system is undergoing investigation. In which directory should the investigators look for its current state data if the system is in powered on state?

NEW QUESTION 129
Which of the following is an iOS Jailbreaking tool?

NEW QUESTION 130
Smith, a network administrator with a large MNC, was the first to arrive at a suspected crime scene involving criminal use of compromised computers. What should be his first response while maintaining the integrity of evidence?

NEW QUESTION 131
What information do you need to recover when searching a victim’s computer for a crime committed with specific e-mail message?

NEW QUESTION 132
In handling computer-related incidents, which IT role should be responsible for recovery, containment, and prevention to constituents?

NEW QUESTION 133
Sectors are pie-shaped regions on a hard disk that store dat
a. Which of the following parts of a hard disk do not contribute in determining the addresses of data?

NEW QUESTION 134
Which of the following data structures stores attributes of a process, as well as pointers to other attributes and data structures?

NEW QUESTION 135
What value of the “Boot Record Signature” is used to indicate that the boot-loader exists?

NEW QUESTION 136
Daryl, a computer forensics investigator, has just arrived at the house of an alleged computer hacker. Daryl takes pictures and tags all computer and peripheral equipment found in the house. Daryl packs all the items found in his van and takes them back to his lab for further examination. At his lab, Michael his assistant helps him with the investigation. Since Michael is still in training, Daryl supervises all of his work very carefully. Michael is not quite sure about the procedures to copy all the data off the computer and peripheral devices. How many data acquisition tools should Michael use when creating copies of the evidence for the investigation?

NEW QUESTION 137
Which of the following tools will allow a forensic Investigator to acquire the memory dump of a suspect machine so that It may be Investigated on a forensic workstation to collect evidentiary data like processes and Tor browser artifacts?

NEW QUESTION 138
The ____________________ refers to handing over the results of private investigations to the authorities because of indications of criminal activity.

NEW QUESTION 139
Which part of Metasploit framework helps users to hide the data related to a previously deleted file or currently unused by the allocated file.

NEW QUESTION 140
The following is a log file screenshot from a default installation of IIS 6.0.

What time standard is used by IIS as seen in the screenshot?

NEW QUESTION 141
To check for POP3 traffic using Ethereal, what port should an investigator search by?

NEW QUESTION 142
Steve, a forensic investigator, was asked to investigate an email incident in his organization. The organization has Microsoft Exchange Server deployed for email communications. Which among the following files will Steve check to analyze message headers, message text, and standard attachments?