Palo Alto Networks

Free 312-49V9 Exam Braindumps (page: 10)

Viewing Page 10 of 122 pages.

Download PDF version with 589 Questions

QUESTION: 37

In Windows 7 system files, which file reads the Boot.ini file and loads Ntoskrnl.exe. Bootvid.dll. Hal.dll, and boot-start device drivers?

Ntldr
Gdi32.dll
Kernel32.dll
Boot.in

Answer(s): A

Reveal Solution Next Question

QUESTION: 38

What is the "Best Evidence Rule"?

It states that the court only allows the original evidence of a document, photograph, or recording at the trial rather than a copy
It contains system time, logged-on user(s), open files, network information, process information, process-to-port mapping, process memory, clipboard contents, service/driver
information, and command history
It contains hidden files, slack space, swap file, index.dat files, unallocated clusters, unused partitions, hidden partitions, registry settings, and event logs
It contains information such as open network connection, user logout, programs that reside in memory, and cache data

Answer(s): A

Reveal Solution Next Question

QUESTION: 39

What is the First Step required in preparing a computer for forensics investigation?

Do not turn the computer off or on, run any programs, or attempt to access data on a computer
Secure any relevant media
Suspend automated document destruction and recycling policies that may pertain to any relevant media or users at Issue
Identify the type of data you are seeking, the Information you are looking for, and the urgency level of the examination

Answer(s): A

Reveal Solution Next Question

QUESTION: 40

What is the smallest allocation unit of a hard disk?

Cluster
Spinning tracks
Disk platters
Slack space

Answer(s): A

Reveal Solution Next Question

Page 10 of 122

Post your Comments and Discuss EC-Council 312-49V9 exam with other Community members:

Comments:

Name:

Olu commented on October 16, 2023
Question 235: 22,164 x 80 x 63 x 512 = 57.19 GB
UNITED STATES
upvote