Free 312-49 Exam Braindumps (page: 59)

Page 58 of 133

Given the drive dimensions as follows and assuming a sector has 512 bytes, what is the capacity of the described hard drive?

22,164 cylinders/disk
80 heads/cylinder
63 sectors/track

  1. 53.26 GB
  2. 57.19 GB
  3. 11.17 GB
  4. 10 GB

Answer(s): A



Travis, a computer forensics investigator, is finishing up a case he has been working on for over a month involving copyright infringement and embezzlement. His last task is to prepare an investigative report for the president of the company he has been working for. Travis must submit a hard copy and an electronic copy to this president. In what electronic format should Travis send this report?

  1. TIFF-8
  2. DOC
  3. WPD
  4. PDF

Answer(s): D



A forensics investigator is searching the hard drive of a computer for files that were recently moved to the Recycle Bin. He searches for files in C:\RECYCLED using a command line tool but does not find anything. What is the reason for this?

  1. He should search in C:\Windows\System32\RECYCLED folder
  2. The Recycle Bin does not exist on the hard drive
  3. The files are hidden and he must use switch to view them
  4. Only FAT system contains RECYCLED folder and not NTFS

Answer(s): C



Why should you never power on a computer that you need to acquire digital evidence from?

  1. When the computer boots up, files are written to the computer rendering the data nclean
  2. When the computer boots up, the system cache is cleared which could destroy evidence
  3. When the computer boots up, data in the memory buffer is cleared which could destroy evidence
  4. Powering on a computer has no affect when needing to acquire digital evidence from it

Answer(s): A






Post your Comments and Discuss EC-Council 312-49 exam with other Community members:

312-49 Exam Discussions & Posts