Free 312-49V9 Exam Braindumps (page: 56)

Page 56 of 122

What happens when a file is deleted by a Microsoft operating system using the FAT file system?

  1. The file is erased and cannot be recovered
  2. The file is erased but can be recovered partially
  3. A copy of the file is stored and the original file is erased
  4. Only the reference to the file is removed from the FAT and can be recovered

Answer(s): D



What must be obtained before an investigation is carried out at a location?

  1. Search warrant
  2. Subpoena
  3. Habeas corpus
  4. Modus operandi

Answer(s): A



The offset in a hexadecimal code is:

  1. The 0x at the beginning of the code
  2. The 0x at the end of the code
  3. The first byte after the colon
  4. The last byte after the colon

Answer(s): A



When making the preliminary investigations in a sexual harassment case, how many investigators are you recommended having?

  1. One
  2. Two
  3. Three
  4. Four

Answer(s): B



Page 56 of 122



Post your Comments and Discuss EC-Council 312-49V9 exam with other Community members:

Olu commented on October 16, 2023
Question 235: 22,164 x 80 x 63 x 512 = 57.19 GB
UNITED STATES
upvote