Last Attempt 312-49v9 Questions

ECCouncil Computer Hacking Forensic Investigator (V9) Questions and Answers

Question 33

Which of the following files DOES NOT use Object Linking and Embedding (OLE) technology to embed and link to other objects?

Options:

Portable Document Format

MS-office Word Document

MS-office Word OneNote

MS-office Word PowerPoint

Question 34

While searching through a computer under investigation, you discover numerous files that appear to have had the first letter of the file name replaced by the hex code byte 5h. What does this indicate on the computer?

Options:

The files have been marked as hidden

The files have been marked for deletion

The files are corrupt and cannot be recovered

The files have been marked as read-only

Question 35

An expert witness is a __________________ who is normally appointed by a party to assist the formulation and preparation of a party’s claim or defense.

Options:

Expert in criminal investigation

Subject matter specialist

Witness present at the crime scene

Expert law graduate appointed by attorney

Question 36

What advantage does the tool Evidor have over the built-in Windows search?

Options:

It can find deleted files even after they have been physically removed

It can find bad sectors on the hard drive

It can search slack space

It can find files hidden within ADS

Labour Day Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

ECCouncil Computer Hacking Forensic Investigator (V9) Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer: