Free 312-49V9 Exam Braindumps
ECCouncil Computer Hacking Forensic Investigator (V9) Questions 246–250 (page: 51)

Updated On: 10-Feb-2026

Which legal document allows law enforcement to search an office, place of business, or other locale for evidence relating to an alleged crime?

  1. Search warrant
  2. Subpoena
  3. Wire tap
  4. Bench warrant

Answer(s): A



When should an MD5 hash check be performed when processing evidence?

  1. After the evidence examination has been completed
  2. On an hourly basis during the evidence examination
  3. Before and after evidence examination
  4. Before the evidence examination has been completed

Answer(s): C



An on-site incident response team is called to investigate an alleged case of computer tampering within their company. Before proceeding with the investigation, the CEO informs them that the incident will be classified as ow level? How long will the team have to respond to the incident?the investigation, the CEO informs them that the incident will be classified as ?ow level? How long will the team have to respond to the incident?

  1. One working day
  2. Two working days
  3. Immediately
  4. Four hours

Answer(s): A



What file is processed at the end of a Windows XP boot to initialize the logon dialog box?

  1. NTOSKRNL.EXE
  2. NTLDR
  3. LSASS.EXE
  4. NTDETECT.COM

Answer(s): C



An investigator is searching through the firewall logs of a company and notices ICMP packets that are larger than 65, 536 bytes. What type of activity is the investigator seeing?

  1. Smurf
  2. Ping of death
  3. Fraggle
  4. Nmap scan

Answer(s): B



Viewing page 51 of 98
Viewing questions 251 - 255 out of 589 questions


Post your Comments and Discuss EC-Council 312-49V9 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!