EC-Council EC0-349 Exam Questions
EC0-349 ECCouncil Computer Hacking Forensic Investigator (Page 12 )

Updated On: 24-Feb-2026

When conducting computer forensic analysis, you must guard against _____________so that you remain focused on the primary job and insure that the level of work does not increase beyond what was originally expected.

  1. unauthorized expenses
  2. overzealous marketing
  3. scope creep
  4. hard drive failure

Answer(s): C



Office documents (Word, Excel, PowerPoint) contain a code that allows tracking the MAC, or unique identifier, of the machine that created the document. What is that code called?

  1. Microsoft Virtual Machine Identifier
  2. Globally Unique ID
  3. Personal Application Protocol
  4. Individual ASCII String

Answer(s): B



While working for a prosecutor, what do you think you should do if the evidence you found appears to be exculpatory and is not being released to the defense?

  1. keep the information on file for later review
  2. present the evidence to the defense attorney
  3. destroy the evidence
  4. bring the information to the attention of the prosecutor, his or her supervisor or finally to the judge (court)

Answer(s): D



What does the acronym POST mean as it relates to a PC?

  1. Pre Operational Situation Test
  2. PowerOn Self Test
  3. Primary Operating System Test
  4. Primary Operations Short Test

Answer(s): B



You are called in to assist the police in an investigation involving a suspected drug dealer. The suspects house was searched by the police after a warrant was obtained and they located a floppy disk in the suspects bedroom. The disk contains several files, but they appear to be password protected. What are two common methods used by password cracking software that you can use to obtain the password?

  1. limited force and library attack
  2. brute force and dictionary attack
  3. minimum force and appendix attack
  4. maximum force and thesaurus attack

Answer(s): B






Post your Comments and Discuss EC-Council EC0-349 exam dumps with other Community members:

Join the EC0-349 Discussion