Free 312-49V9 Exam Braindumps (page: 34)

Page 34 of 122

Billy, a computer forensics expert, has recovered a large number of DBX files during forensic investigation of a laptop. Which of the following email clients he can use to analyze the DBX files?

  1. Microsoft Outlook
  2. Microsoft Outlook Express
  3. Mozilla Thunderoird
  4. Eudora

Answer(s): B



Mobile phone forensics is the science of recovering digital evidence from a mobile phone under forensically sound conditions.

  1. True
  2. False

Answer(s): A



File deletion is a way of removing a file from a computer's file system. What happens when a file is deleted in windows7?

  1. The last letter of a file name is replaced by a hex byte code E5h
  2. The operating system marks the file's name in the MFT with a special character that indicates that the file has been deleted
  3. Corresponding clusters in FAT are marked as used
  4. The computer looks at the clusters occupied by that file and does not avails space to store a new file

Answer(s): B



Raw data acquisition format creates ____________of a data set or suspect drive.

  1. Simple sequential flat files
  2. Segmented files
  3. Compressed image files
  4. Segmented image files

Answer(s): A



Page 34 of 122



Post your Comments and Discuss EC-Council 312-49V9 exam with other Community members:

Olu commented on October 16, 2023
Question 235: 22,164 x 80 x 63 x 512 = 57.19 GB
UNITED STATES
upvote