Free 312-49 Exam Braindumps
Computer Hacking Forensic Investigator Questions 131–135 (page: 28)

Updated On: 10-Feb-2026

The rule of thumb when shutting down a system is to pull the power plug. However, it has certain drawbacks. Which of the following would that be?

  1. Any data not yet flushed to the system will be lost
  2. All running processes will be lost
  3. The /tmp directory will be flushed
  4. Power interruption will corrupt the pagefile

Answer(s): A



You are a computer forensics investigator working with local police department and you are called to assist in an investigation of threatening emails. The complainant has printer out 27 email messages from the suspect and gives the printouts to you. You inform her that you will need to examine her computer because you need access to the ___________in order to track the emails back to the suspect.

  1. Routing Table
  2. Firewall log
  3. Configuration files
  4. Email Header

Answer(s): D



Hackers can gain access to Windows Registry and manipulate user passwords, DNS settings, access rights or others features that they may need in order to accomplish their objectives. One simple method for loading an application at startup is to add an entry (Key) to the following Registry Hive:

  1. HKEY_LOCAL_MACHINE\hardware\windows\start
  2. HKEY_LOCAL_USERS\Software\Microsoft\old\Version\Load
  3. HKEY_CURRENT_USER\Microsoft\Default
  4. HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run

Answer(s): D



Which of the following file system is used by Mac OS X?

  1. EFS
  2. HFS+
  3. EXT2
  4. NFS

Answer(s): B



When you are running a vulnerability scan on a network and the IDS cuts off your connection, what type of IDS is being used?

  1. Passive IDS
  2. Active IDS
  3. Progressive IDS
  4. NIPS

Answer(s): B



Viewing page 28 of 108
Viewing questions 136 - 140 out of 704 questions


Post your Comments and Discuss EC-Council 312-49 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!