Cisco®
Oracle
CompTIA
Checkpoint
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
Microsoft
VMware
Avaya
SAP
Google
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk®
All Vendors
  2. Home
  3. Exams
  4. EC-Council
  5. 312-49v10

Free EC-Council 312-49v10 Exam Questions (page: 30)

Page 30 of 171
PDF with 831 Questions

Printing under a Windows Computer normally requires which one of the following les types to be created?

  1. EME
  2. MEM
  3. EMF
  4. CME

Answer(s): C



An Expert witness give an opinion if:

  1. The Opinion, inferences or conclusions depend on special knowledge, skill or training not within the ordinary experience of lay jurors
  2. To de ne the issues of the case for determination by the nder of fact
  3. To stimulate discussion between the consulting expert and the expert witness
  4. To deter the witness form expanding the scope of his or her investigation beyond the requirements of the case

Answer(s): A



When using Windows acquisitions tools to acquire digital evidence, it is important to use a well-tested hardware write-blocking device to:

  1. Automate Collection from image les
  2. Avoiding copying data from the boot partition
  3. Acquire data from host-protected area on a disk
  4. Prevent Contamination to the evidence drive

Answer(s): D



O ce Documents (Word, Excel and PowerPoint) contain a code that allows tracking the MAC or unique identi er of the machine that created the document.
What is that code called?

  1. Globally unique ID
  2. Microsoft Virtual Machine Identi er
  3. Personal Application Protocol
  4. Individual ASCII string

Answer(s): A



Viewing page 30 of 171



Post your Comments and Discuss EC-Council 312-49v10 exam prep with other Community members:

312-49v10 Exam Discussions & Posts