Free 312-49V9 Exam Braindumps
ECCouncil Computer Hacking Forensic Investigator (V9) Questions 131–135 (page: 28)

Updated On: 10-Feb-2026

Which of the following commands shows you the username and IP address used to access the system via a remote login session and the Type of client from which they are accessing the system?

  1. Net sessions
  2. Net file
  3. Net config
  4. Net share

Answer(s): A



Which of the following file in Novel GroupWise stores information about user accounts?

  1. ngwguard.db
  2. gwcheck.db
  3. PRIV.EDB
  4. PRIV.STM

Answer(s): A



Billy, a computer forensics expert, has recovered a large number of DBX files during forensic investigation of a laptop. Which of the following email clients he can use to analyze the DBX files?

  1. Microsoft Outlook
  2. Microsoft Outlook Express
  3. Mozilla Thunderoird
  4. Eudora

Answer(s): B



Mobile phone forensics is the science of recovering digital evidence from a mobile phone under forensically sound conditions.

  1. True
  2. False

Answer(s): A



File deletion is a way of removing a file from a computer's file system. What happens when a file is deleted in windows7?

  1. The last letter of a file name is replaced by a hex byte code E5h
  2. The operating system marks the file's name in the MFT with a special character that indicates that the file has been deleted
  3. Corresponding clusters in FAT are marked as used
  4. The computer looks at the clusters occupied by that file and does not avails space to store a new file

Answer(s): B



Viewing page 28 of 98
Viewing questions 136 - 140 out of 589 questions


Post your Comments and Discuss EC-Council 312-49V9 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!