Free 312-49 Exam Braindumps
Computer Hacking Forensic Investigator Questions 276–280 (page: 57)

Updated On: 10-Feb-2026

In the following email header, where did the email first originate from?

  1. Somedomain.com
  2. Smtp1.somedomain.com
  3. Simon1.state.ok.gov.us
  4. David1.state.ok.gov.us

Answer(s): C



A computer forensics investigator is inspecting the firewall logs for a large financial institution that has employees working 24 hours a day, 7 days a week.


What can the investigator infer from the screenshot seen below?

  1. A smurf attack has been attempted
  2. A denial of service has been attempted
  3. Network intrusion has occurred
  4. Buffer overflow attempt on the firewall.

Answer(s): C



When investigating a wireless attack, what information can be obtained from the DHCP logs?

  1. The operating system of the attacker and victim computers
  2. IP traffic between the attacker and the victim
  3. MAC address of the attacker
  4. If any computers on the network are running in promiscuous mode

Answer(s): C



This type of testimony is presented by someone who does the actual fieldwork and does not offer a view in court.

  1. Civil litigation testimony
  2. Expert testimony
  3. Victim advocate testimony
  4. Technical testimony

Answer(s): D



On an Active Directory network using NTLM authentication, where on the domain controllers are the passwords stored?

  1. SAM
  2. AMS
  3. Shadow file
  4. Password.conf

Answer(s): A



Viewing page 57 of 108
Viewing questions 281 - 285 out of 704 questions


Post your Comments and Discuss EC-Council 312-49 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!