Free EC0-349 Exam braindumps download (EC0-349 exam dumps Free)

QUESTION: 76

You are working as an investigator for a corporation and you have just received instructions from your manager to assist in the collection of 15 hard drives that are part of an ongoing investigation. Your job is to complete the required evidence custody forms to properly document each piece of evidence as it is collected by other members of your team. Your manager instructs you to complete one multi-evidence form for the entire case and a single-evidence form for each hard drive. How will these forms be stored to help preserve the chain of custody of the case?

All forms should be placed in an approved secure container because they are now primary evidence in the case.
All forms should be placed in the report file because they are now primary evidence in the case.
The multi-evidence form should be placed in an approved secure container with the hard drives and the single-evidence forms should be placed in the report file.
The multi-evidence form should be placed in the report file and the single-evidence forms should be kept with each hard drive in an approved secure container.

Answer(s): D

Show Answer Next Question

QUESTION: 77

What happens when a file is deleted by a Microsoft operating system using the FAT file system?

only the reference to the file is removed from the FAT
a copy of the file is stored and the original file is erased
the file is erased and cannot be recovered
the file is erased but can be recovered

Answer(s): A

Show Answer Next Question

QUESTION: 78

You are working in the Security Department of a law firm. One of the attorneys asks you about the topic of sending fake email because he has a client who has been charged with doing just that. His client alleges that he is innocent and that there is no way for a fake email to actually be sent. You inform the attorney that his client is mistaken and that fake email is a possibility and that you can prove it. You return to your desk and craft a fake email to the attorney that appears to come from his boss. What port do you send the email to on the company’s SMTP server?

Answer(s): D

Show Answer Next Question

QUESTION: 79

How many characters long is the fixed-length MD5 algorithm checksum of a critical system file?

Answer(s): A

Show Answer Next Question

QUESTION: 80

When reviewing web logs, you see an entry for resource not found in the HTTP status code field. What is the actual error code that you would see in the log for resource not found?

Answer(s): C

Show Answer Next Question

Free EC0-349 Exam Braindumps EC0-349 ECCouncil Computer Hacking Forensic Investigator Questions 76–80 (page: 17)

QUESTION: 76

QUESTION: 77

QUESTION: 78

QUESTION: 79

QUESTION: 80

Free EC0-349 Exam Braindumps
EC0-349 ECCouncil Computer Hacking Forensic Investigator Questions 76–80 (page: 17)