support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. EC-Council
  4. EC0-349

Free EC0-349 Exam Braindumps
EC0-349 ECCouncil Computer Hacking Forensic Investigator Questions 71–75 (page: 16)

Updated On: 10-Feb-2026
Page 16 of 76
PDF with 374 Questions

Why should you note all cable connections for a computer you want to seize as evidence?

  1. to know what cable connections existed
  2. to know what hardware existed
  3. to prepare for shutting down the computer
  4. to document the evidence

Answer(s): A



What happens when a file is deleted by a Microsoft operating system using the FAT file system?

  1. the file is erased but can be recovered
  2. only the reference to the file is removed from the FAT
  3. the file is erased and cannot be recovered
  4. a copy of the file is stored and the original file is erased

Answer(s): B



In conducting a computer abuse investigation you become aware that the suspect of the investigation is using ABC Company as his Internet Service Provider (ISP). You contact the ISP and request that they provide you assistance with your investigation. What assistance can the ISP provide?

  1. the ISP can investigate computer abuse committed by their employees, but must preserve the privacy of their customers and therefore cannot assist you without a warrant
  2. the ISP can investigate anyone using their service and can provide you with assistance
  3. ISPs never maintain log files so they would be of no use to your investigation
  4. the ISP cannot conduct any type of investigations on anyone and therefore cannot assist you

Answer(s): A



What should you do when approached by a reporter about a case that you are working on or have worked on?

  1. refer the reporter to the attorney that retained you
  2. answer only the questions that help your case
  3. say, "no comment"
  4. answer all the reporters questions as completely as possible

Answer(s): A



You should make at least how many bit-stream copies of a suspect drive?

  1. 2
  2. 3
  3. 1
  4. 4

Answer(s): A



  PDF
Viewing page 16 of 76
Viewing questions 76 - 80 out of 374 questions


Post your Comments and Discuss EC-Council EC0-349 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!