support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. EC-Council
  4. 312-49V9

Free 312-49V9 Exam Braindumps
ECCouncil Computer Hacking Forensic Investigator (V9) Questions 121–125 (page: 26)

Updated On: 10-Feb-2026
Page 26 of 98
PDF with 589 Questions

When collecting evidence from the RAM, where do you look for data?

  1. Swap file
  2. SAM file
  3. Data file
  4. Log file

Answer(s): A



What is the first step that needs to be carried out to investigate wireless attacks?

  1. Obtain a search warrant
  2. Identify wireless devices at crime scene
  3. Document the scene and maintain a chain of custody
  4. Detect the wireless connections

Answer(s): A



What is cold boot (hard boot)?

  1. It is the process of starting a computer from a powered-down or off state
  2. It is the process of restarting a computer that is already turned on through the operating system
  3. It is the process of shutting down a computer from a powered-on or on state
  4. It is the process of restarting a computer that is already in sleep mode

Answer(s): A



TCP/IP (Transmission Control Protocol/Internet Protocol) is a communication protocol used to connect different hosts in the Internet. It contains four layers, namely the network interface layer. Internet layer, transport layer, and application layer.
Which of the following protocols works under the transport layer of TCP/IP?

  1. UDP
  2. HTTP
  3. FTP
  4. SNMP

Answer(s): A



Which of the following statements is incorrect when preserving digital evidence?

  1. Document the actions and changes that you observe in the monitor, computer, printer, or in other peripherals
  2. Verily if the monitor is in on, off, or in sleep mode
  3. Remove the power cable depending on the power state of the computer i.e., in on. off, or in sleep mode
  4. Turn on the computer and extract Windows event viewer log files

Answer(s): D



  PDF
Viewing page 26 of 98
Viewing questions 126 - 130 out of 589 questions


Post your Comments and Discuss EC-Council 312-49V9 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!