If you are concerned about a high level of compression but not concerned about any possible data loss, what type of compression would you use?
Answer(s): B
When marking evidence that has been collected with the aa/ddmmyy/nnnn/zz format, what does the nnn denote?
Answer(s): D
An investigator is searching through the firewall logs of a company and notices ICMP packets that are larger than 65,536 bytes. What type of activity is the investigator seeing?
When carrying out a forensics investigation, why should you never delete a partition on a dynamic disk?
Answer(s): C
When using an iPod and the host computer is running Windows, what file system will be used?
Post your Comments and Discuss EC-Council 312-49 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 312-49 content, but please register or login to continue.