Free 312-49V9 Exam Braindumps (page: 59)

Page 59 of 122

The efforts to obtain information before a trial by demanding documents, depositions, questions and answers written under oath, written requests for admissions of fact, and examination of the scene is a description of what legal term?

  1. Detection
  2. Hearsay
  3. Spoliation
  4. Discovery

Answer(s): D



John is working as a computer forensics investigator for a consulting firm in Canada. He is called to seize a computer at a local web caf?John is working as a computer forensics investigator for a consulting firm in Canada. He is called to seize a computer at a local web caf purportedly used as a botnet server. John thoroughly scans the computer and finds nothing that would lead him to think the computer was a botnet server. John decides to scan the virtual memory of the computer to possibly find something he had missed. What information will the virtual memory scan produce?

  1. It contains the times and dates of when the system was last patched
  2. It is not necessary to scan the virtual memory of a computer
  3. It contains the times and dates of all the system files
  4. Hidden running processes

Answer(s): D



Given the drive dimensions as follows and assuming a sector has 512 bytes, what is the capacity of the described hard drive?

22, 164 cylinders/disk
80 heads/cylinder
63 sectors/track

  1. 53.26 GB
  2. 57.19 GB
  3. 11.17 GB
  4. 10 GB

Answer(s): A



In the following directory listing,



which file should be used to restore archived email messages for someone using Microsoft Outlook?

  1. Outlook bak
  2. Outlook ost
  3. Outlook NK2
  4. Outlook pst

Answer(s): D



Page 59 of 122



Post your Comments and Discuss EC-Council 312-49V9 exam with other Community members:

Olu commented on October 16, 2023
Question 235: 22,164 x 80 x 63 x 512 = 57.19 GB
UNITED STATES
upvote