최신 312-49 무료덤프 - EC-COUNCIL Computer Hacking Forensic Investigator
Travis, a computer forensics investigator, is finishing up a case he has been working on for over a month involving copyright infringement and embezzlement. His last task is to prepare an investigative report for the president of the company he has been working for.
Travis must submit a hard copy and an electronic copy to this president. In what electronic format should Travis send this report?
Travis must submit a hard copy and an electronic copy to this president. In what electronic format should Travis send this report?
정답: A
An employee is attempting to wipe out data stored on a couple of compact discs (CDs) and digital video discs (DVDs) by using a large magnet. You inform him that this method will not be effective in wiping out the data because CDs and DVDs are _________ media used to store large amounts of data and are not affected by the magnet.
정답: C
An employee is suspected of stealing proprietary information belonging to your company that he had no rights to possess. The information was stored on the employee computer that was protected with the NTFS Encrypted File System (EFS) and you had observed him copy the files to astored on the employee? computer that was protected with the NTFS
Encrypted File System (EFS) and you had observed him copy the files to a floppy disk just before leaving work for the weekend. You detain the employee before he leaves the building and recover the floppy disk and secure his computer. Will you be able to break the encryption so that you can verify that the employee was in possession of the proprietary information?
Encrypted File System (EFS) and you had observed him copy the files to a floppy disk just before leaving work for the weekend. You detain the employee before he leaves the building and recover the floppy disk and secure his computer. Will you be able to break the encryption so that you can verify that the employee was in possession of the proprietary information?
정답: D
The following is a log file screenshot from a default installation of IIS 6.0.
![](https://www.dumptop.com/uploads/imgs/312-49 V12.35/img_31.jpg)
What time standard is used by IIS as seen in the screenshot?
![](https://www.dumptop.com/uploads/imgs/312-49 V12.35/img_31.jpg)
What time standard is used by IIS as seen in the screenshot?
정답: B
A picture file is recovered from a computer under investigation. During the investigation process, the file is enlarged 500% to get a better view of its contents. The picture quality is not degraded at all from this process. What kind of picture is this file?its contents. The picture? quality is not degraded at all from this process. What kind of picture is this file?
정답: A
In the following directory listing,
![](https://www.dumptop.com/uploads/imgs/312-49 V12.35/img_12.jpg)
which file should be used to restore archived email messages for someone using Microsoft
Outlook?
![](https://www.dumptop.com/uploads/imgs/312-49 V12.35/img_12.jpg)
which file should be used to restore archived email messages for someone using Microsoft
Outlook?
정답: A
When searching through file headers for picture file formats, what should be searched to find a JPEG file in hexadecimal format?
정답: A
What feature of Windows is the following command trying to utilize?
![](https://www.dumptop.com/uploads/imgs/312-49 V12.35/img_42.jpg)
![](https://www.dumptop.com/uploads/imgs/312-49 V12.35/img_42.jpg)
정답: D
What happens when a file is deleted by a Microsoft operating system using the FAT file system?
정답: A
Given the drive dimensions as follows and assuming a sector has 512 bytes, what is the capacity of the described hard drive?
22,164 cylinders/disk
80 heads/cylinder
63 sectors/track
22,164 cylinders/disk
80 heads/cylinder
63 sectors/track
정답: D