QUESTION: 89

If the partition size Is 4 GB, each cluster will be 32 K. Even If a file needs only 10 K, the entire 32 K will be allocated, resulting In 22 K of___________.

Slack space
Deleted space
Cluster space
Sector space

Answer(s): A

Show Answer Next Question

QUESTION: 90

Deposition enables opposing counsel to preview an expert witness's testimony at trial. Which of the following deposition is not a standard practice?

Both attorneys are present
Only one attorneys is present
No jury or judge
Opposing counsel asks questions

Answer(s): B

Show Answer Next Question

QUESTION: 91

Which of the following statements does not support the case assessment?

Review the case investigator's request for service
Identify the legal authority for the forensic examination request
Do not document the chain of custody
Discuss whether other forensic processes need to be performed on the evidence

Answer(s): C

Show Answer Next Question

Windows Security Event Log contains records of login/logout activity or other security- related events specified by the system's audit policy. What does event ID 531 in Windows Security Event Log indicates?

A user successfully logged on to a computer
The logon attempt was made with an unknown user name or a known user name with a bad password
An attempt was made to log on with the user account outside of the allowed time
A logon attempt was made using a disabled account

Answer(s): D

Show Answer Next Question

Free EC-Council 312-49V9 Exam Questions (page: 44)

QUESTION: 89

QUESTION: 90

QUESTION: 91

QUESTION: 92

312-49V9 Exam Discussions & Posts