Which "Standards and Criteria" under SWDGE states that "the agency must use hardware and software that are appropriate and effective for the seizure or examination procedure"?
Answer(s): B
A call detail record (CDR) provides metadata about calls made over a phone service. From the following data fields, which one is not contained in a CDR.
Answer(s): D
"In exceptional circumstances, where a person finds it necessary to access original data held on a computer or on storage media, that person must be competent to do so and be able to explain his/her actions and the impact of those actions on the evidence, in the court." Which ACPO principle states this?
On NTFS file system, which of the following tools can a forensic investigator use in order to identify timestomping of evidence files?
Answer(s): C
Matthew has been assigned the task of analyzing a suspicious MS Office document via static analysis over an Ubuntu-based forensic machine. He wants to see what type of document it is, whether it is encrypted, or contains any flash objects/VBA macros. Which of the following python-based script should he run to get relevant information?
Answer(s): A
Post your Comments and Discuss EC-Council 312-49v11 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 312-49v11 content, but please register or login to continue.