Free EC0-349 Exam Braindumps
EC0-349 ECCouncil Computer Hacking Forensic Investigator Questions 81–85 (page: 18)

Updated On: 10-Feb-2026

Which legal document allows law enforcement to search an office, place of business, or other locale for evidence relating to an alleged crime?

  1. search warrant
  2. wire tap
  3. subpoena
  4. bench warrant

Answer(s): A



You are working as computer forensics investigator and are called by the owner of an accounting firm to investigate possible computer abuse by one of the firms employees. You meet with the owner of the firm and discover that the company has never published a policy stating that they reserve the right to inspect their computing assets at will. What do you do?

  1. inform the owner that conducting an investigation without a policy is a violation of the 4th Amendment
  2. inform the owner that conducting an investigation without a policy is a violation of the employees expectation of privacy
  3. inform the owner that conducting an investigation without a policy is not a problem because the company is privately owned
  4. inform the owner that conducting an investigation without a policy is not a problem because a policy is only necessary for government agencies

Answer(s): B



Lance wants to place a honeypot on his network. Which of the following would be your recommendations?

  1. It doesn’t matter as all replies are faked
  2. Use a system that has a dynamic addressing on the network
  3. Use it on a system in an external DMZ in front of the firewall
  4. Use a system that is not directly interacting with the router

Answer(s): C



When monitoring for both intrusion and security events between multiple computers, it is essential that the computers' clocks are synchronized. Synchronized time allows an administrator to reconstruct what took place during an attack against multiple computers. Without synchronized time, it is very difficult to determine exactly when specific events took place, and how events interlace. What is the name of the service used to synchronize time among multiple computers?

  1. Universal Time Set
  2. Network Time Protocol
  3. Time-Sync Protocol
  4. SyncTime Service

Answer(s): B



The MD5 program is used to:

  1. view graphics files on an evidence drive
  2. wipe magnetic media before recycling it
  3. make directories on a evidence disk
  4. verify that a disk is not altered when you examine it

Answer(s): D



Viewing page 18 of 76
Viewing questions 86 - 90 out of 374 questions


Post your Comments and Discuss EC-Council EC0-349 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!