Free 312-49 Exam Braindumps (page: 19)

Page 18 of 133

When performing a forensics analysis, what device is used to prevent the system from recording data on an evidence disk?

  1. a write-blocker
  2. a protocol analyzer
  3. a firewall
  4. a disk editor

Answer(s): A



How many sectors will a 125 KB file use in a FAT32 file system?

  1. 32
  2. 16
  3. 256
  4. 25

Answer(s): C



You are called by an author who is writing a book and he wants to know how long the copyright for his book will last after he has the book published?

  1. 70 years
  2. the life of the author
  3. the life of the author plus 70 years
  4. copyrights last forever

Answer(s): C



When investigating a network that uses DHCP to assign IP addresses, where would you look to determine which system (MAC address) had a specific IP address at a specific time?

  1. on the individual computer's ARP cache
  2. in the Web Server log files
  3. in the DHCP Server log files
  4. there is no way to determine the specific IP address

Answer(s): C






Post your Comments and Discuss EC-Council 312-49 exam with other Community members:

312-49 Discussions & Posts