Free 312-49v11 Exam Braindumps
Computer Hacking Forensic Investigator Questions 56–60 (page: 13)

Which of the following tools is used to dump the memory of a running process, either immediately or when an error condition occurs?

Williamson is a forensic investigator.
While investigating a case of data breach at a company, he is maintaining a document that records details such as the forensic processes applied on the collected evidence, particulars of people handling it, the dates and times when it is being handled, and the place of storage of the evidence.
What do you call this document?

Which of the following is a requirement for senders as per the CAN-SPAM act?

Donald made an OS disk snapshot of a compromised Azure VM under a resource group being used by the affected company as a part of forensic analysis process. He then created a vhd file out of the snapshot and stored it in a file share and as a page blob as backup in a storage account under different region.
What is the next thing he should do as a security measure?

Identify the location of Recycle Bin on a Windows 7 machine that uses NTFS file system to store and retrieve files on the hard disk.