Free 312-49 Exam Braindumps
Computer Hacking Forensic Investigator Questions 256–260 (page: 53)

Updated On: 10-Feb-2026

When should an MD5 hash check be performed when processing evidence?

  1. After the evidence examination has been completed
  2. On an hourly basis during the evidence examination
  3. Before and after evidence examination
  4. Before the evidence examination has been completed

Answer(s): C



At what layer does a cross site scripting attack occur on?

  1. Presentation
  2. Application
  3. Session
  4. Data Link

Answer(s): B



Davidson Trucking is a small transportation company that has three local offices in Detroit Michigan. Ten female employees that work for the company have gone to an attorney reporting that male employees repeatedly harassed them and that management did nothing to stop the problem. Davidson has employee policies that outline all company guidelines, including awareness on harassment and how it will not be tolerated. When the case is brought to court, whom should the prosecuting attorney call upon for not upholding company policy?

  1. IT personnel
  2. Employees themselves
  3. Supervisors
  4. Administrative assistant in charge of writing policies

Answer(s): C



When searching through file headers for picture file formats, what should be searched to find a JPEG file in hexadecimal format?

  1. FF D8 FF E0 00 10
  2. FF FF FF FF FF FF
  3. FF 00 FF 00 FF 00
  4. EF 00 EF 00 EF 00

Answer(s): A



Jack Smith is a forensics investigator who works for Mason Computer Investigation Services. He is investigating a computer that was infected by Ramen Virus.


He runs the netstat command on the machine to see its current connections. In the following screenshot, what do the 0.0.0.0 IP addresses signify?

  1. Those connections are established
  2. Those connections are in listening mode
  3. Those connections are in closed/waiting mode
  4. Those connections are in timed out/waiting mode

Answer(s): B



Viewing page 53 of 108
Viewing questions 261 - 265 out of 704 questions


Post your Comments and Discuss EC-Council 312-49 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!