Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. EC-Council
  5. 312-49V9

EC-Council 312-49V9 Exam Questions
ECCouncil Computer Hacking Forensic Investigator (V9) (Page 10 )

Updated On: 17-Feb-2026
Page 10 of 98
PDF with 589 Questions

An Internet standard protocol (built on top of TCP/IP) that assures accurate synchronization to the millisecond of computer clock times in a network of computers. Which of the following statement is true for NTP Stratum Levels?

  1. Stratum-0 servers are used on the network; they are not directly connected to computers which then operate as stratum-1 servers
  2. Stratum-1 time server is linked over a network path to a reliable source of UTC time such as GPS, WWV, or CDMA transmissions
  3. A stratum-2 server is directly linked (not over a network path) to a reliable source of UTC time such as GPS, WWV, or CDMA transmissions
  4. A stratum-3 server gets its time over a network link, via NTP, from a stratum-2 server, and so on

Answer(s): D



An expert witness is a witness, who by virtue of education, profession, or experience, is believed to have special knowledge of his/her subject beyond that of the average person, sufficient that others legally depend upon his/her opinion.

  1. True
  2. False

Answer(s): A



Physical security recommendations: There should be only one entrance to a forensics lab

  1. True
  2. False

Answer(s): A



When dealing with the powered-off computers at the crime scene, if the computer is switched off, turn it on

  1. True
  2. False

Answer(s): B



Computer forensics report provides detailed information on complete computer forensics investigation process. It should explain how the incident occurred, provide technical details of the incident and should be clear to understand. Which of the following attributes of a forensics report can render it inadmissible in a court of law?

  1. It includes metadata about the incident
  2. It includes relevant extracts referred to In the report that support analysis or conclusions
  3. It is based on logical assumptions about the incident timeline
  4. It maintains a single document style throughout the text

Answer(s): C






Post your Comments and Discuss EC-Council 312-49V9 exam dumps with other Community members:

Join the 312-49V9 Discussion