Free 312-49V9 Exam Braindumps (page: 46)

Page 46 of 122

Preparing an image drive to copy files to is the first step in Linux forensics. For this purpose, what would the following command accomplish? dcfldd if=/dev/zero of=/dev/hda bs=4096 conv=noerror, sync

  1. Fill the disk with zeros
  2. Low-level format
  3. Fill the disk with 4096 zeros
  4. Copy files from the master disk to the slave disk on the secondary IDE controller

Answer(s): A



When examining a file with a Hex Editor, what space does the file header occupy?

  1. The first several bytes of the file
  2. One byte at the beginning of the file
  3. None, file headers are contained in the FAT
  4. The last several bytes of the file

Answer(s): A



Paraben Lockdown device uses which operating system to write hard drive data?Paraben? Lockdown device uses which operating system to write hard drive data?

  1. Mac OS
  2. Red Hat
  3. Unix
  4. Windows

Answer(s): D



What type of file is represented by a colon (:) with a name following it in the Master File Table (MFT) of an NTFS disk?

  1. Compressed file
  2. Data stream file
  3. Encrypted file
  4. Reserved file

Answer(s): B



Page 46 of 122



Post your Comments and Discuss EC-Council 312-49V9 exam with other Community members:

Olu commented on October 16, 2023
Question 235: 22,164 x 80 x 63 x 512 = 57.19 GB
UNITED STATES
upvote