Free 312-49V9 Exam braindumps download (312-49V9 exam dumps Free)

When carrying out a forensics investigation, why should you never delete a partition on a dynamic disk?

Answer(s): C

Why should you never power on a computer that you need to acquire digital evidence from?

When the computer boots up, files are written to the computer rendering the data nclean?When the computer boots up, files are written to the computer rendering the data ?nclean
When the computer boots up, the system cache is cleared which could destroy evidence
When the computer boots up, data in the memory buffer is cleared which could destroy evidenceWhen the computer boots up, data in the memory? buffer is cleared which could destroy evidence
Powering on a computer has no affect when needing to acquire digital evidence from it

Answer(s): A

What type of attack sends SYN requests to a target system with spoofed IP addresses?

Answer(s): A

What must an investigator do before disconnecting an iPod from any type of computer?

Answer(s): A

Which is a standard procedure to perform during all computer forensics investigations?

With the hard drive in the suspect PC, check the date and time in the system.
With the hard drive removed from the suspect PC, check the date and time in the system CMOS.
With the hard drive in the suspect PC, check the date and time in the File Allocation Table
With the hard drive removed from the suspect PC, check the date and time in the system RAM.

Answer(s): B

Free 312-49V9 Exam Braindumps ECCouncil Computer Hacking Forensic Investigator (V9) Questions 226–230 (page: 47)