Free 312-49V9 Exam Braindumps
ECCouncil Computer Hacking Forensic Investigator (V9) Questions 196–200 (page: 41)

Updated On: 10-Feb-2026

With regard to using an antivirus scanner during a computer forensics investigation, you should:

  1. Scan the suspect hard drive before beginning an investigation
  2. Never run a scan on your forensics workstation because it could change your system configurationNever run a scan on your forensics workstation because it could change your system? configuration
  3. Scan your forensics workstation at intervals of no more than once every five minutes during an investigation
  4. Scan your forensics workstation before beginning an investigation

Answer(s): D



When performing a forensics analysis, what device is used to prevent the system from recording data on an evidence disk?

  1. Write-blocker
  2. Protocol analyzer
  3. Firewall
  4. Disk editor

Answer(s): A



What term is used to describe a cryptographic technique for embedding information into something else for the sole purpose of hiding that information from the casual observer?

  1. Key escrow
  2. Steganography
  3. Rootkit
  4. Offset

Answer(s): B



A picture file is recovered from a computer under investigation. During the investigation process, the file is enlarged 500% to get a better view of its contents. The picture quality is not degraded at all from this process. What kind of picture is this file?its contents. The picture? quality is not degraded at all from this process. What kind of picture is this file?

  1. Raster image
  2. Vector image
  3. Metafile image
  4. Catalog image

Answer(s): B



What layer of the OSI model do TCP and UDP utilize?

  1. Data Link
  2. Network
  3. Transport
  4. Session

Answer(s): C



Viewing page 41 of 98
Viewing questions 201 - 205 out of 589 questions


Post your Comments and Discuss EC-Council 312-49V9 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!