Free 312-49v11 Exam Braindumps
Computer Hacking Forensic Investigator Questions 46–50 (page: 11)

Updated On: 10-Feb-2026

What does Locard's Exchange Principle state?

  1. Any information of probative value that is either stored or transmitted in a digital form
  2. Digital evidence must have some characteristics to be disclosed in the court of law
  3. Anyone or anything, entering a crime scene takes something of the scene with them, and leaves something of themselves behind when they leave
  4. Forensic investigators face many challenges during forensics investigation of a digital crime, such as extracting, preserving, and analyzing the digital evidence

Answer(s): C


Reference:

https://www.sciencedirect.com/topics/social-sciences/exchange-principle#:~:text=Locard's% 20Exchange%20Principle%20states%20that,pollen%2C%20paint%2C%20and%20soil



You are asked to build a forensic lab and your manager has specifically informed you to use copper for lining the walls, ceilings, and floor.
What is the main purpose of lining the walls, ceilings, and floor with copper?

  1. To control the room temperature
  2. To strengthen the walls, ceilings, and floor
  3. To avoid electromagnetic emanations
  4. To make the lab sound proof

Answer(s): D


Reference:

https://info-savvy.com/physical-security-recommendations-of-computer-forensics-lab/



Which tool allows dumping the contents of process memory without stopping the process?

  1. psdump.exe
  2. pmdump.exe
  3. processdump.exe
  4. pdump.exe

Answer(s): B


Reference:

https://www.sciencedirect.com/topics/computer-science/memory-dump-file#:~:text=Post% 20Mortem%20Dump%20or%20PMDump,analysis%20of%20a%20dump%20file



William is examining a log entry that reads 192.168.0.1 - - [18/Jan/2020:12:42:29 +0000] "GET / HTTP/1.1" 200 1861.
Which of the following logs does the log entry belong to?

  1. The common log format of Apache access log
  2. IIS log
  3. The combined log format of Apache access log
  4. Apache error log

Answer(s): A



In a Filesystem Hierarchy Standard (FHS), which of the following directories contains the binary files required for working?

  1. /mnt
  2. /sbin
  3. /media
  4. /proc

Answer(s): B



Viewing page 11 of 31
Viewing questions 51 - 55 out of 452 questions


Post your Comments and Discuss EC-Council 312-49v11 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!