Free 312-49 Exam Braindumps (page: 30)

Page 29 of 133

Printing under a Windows Computer normally requires which one of the following files types to be created?

  1. EME
  2. MEM
  3. EMF
  4. CME

Answer(s): C



An Expert witness give an opinion if:

  1. The Opinion, inferences or conclusions depend on special knowledge, skill or training not within the ordinary experience of lay jurors
  2. To define the issues of the case for determination by the finder of fact
  3. To stimulate discussion between the consulting expert and the expert witness
  4. To deter the witness form expanding the scope of his or her investigation beyond the requirements of the case

Answer(s): A



When using Windows acquisitions tools to acquire digital evidence, it is important to use a well-tested hardware write-blocking device to:

  1. Automate Collection from image files
  2. Avoiding copying data from the boot partition
  3. Acquire data from host-protected area on a disk
  4. Prevent Contamination to the evidence drive

Answer(s): D



Office Documents (Word, Excel and PowerPoint) contain a code that allows tracking the MAC or unique identifier of the machine that created the document. What is that code called?

  1. Globally unique ID
  2. Microsoft Virtual Machine Identifier
  3. Personal Application Protocol
  4. Individual ASCII string

Answer(s): A






Post your Comments and Discuss EC-Council 312-49 exam with other Community members:

312-49 Discussions & Posts