QUESTION: 1

In what way do the procedures for dealing with evidence in a criminal case differ from the procedures for dealing with evidence in a civil case?

evidence procedures are not important unless you work for a law enforcement agency
evidence must be handled in the same way regardless of the type of case
evidence in a civil case must be secured more tightly than in a criminal case
evidence in a criminal case must be secured more tightly than in a civil case

Answer(s): B

Reveal Solution Next Question

QUESTION: 2

Which part of the Windows Registry contains the user's password file?

HKEY_LOCAL_MACHINE
HKEY_CURRENT_CONFIGURATION
HKEY_USER
HKEY_CURRENT_USER

Answer(s): C

Reveal Solution Next Question

QUESTION: 3

If a suspect's computer is located in an area that may have toxic chemicals, you must

coordinate with the HAZMAT team
do not enter alone
assume the suspect machine is contaminated
determine a way to obtain the suspect computer

Answer(s): A

Reveal Solution Next Question

Profiling is a forensics technique for analyzing evidence with the goal of identifying the perpetrator from their pervious activity. After a computer has been compromised by a hacker, which of the following would be most important in forming a profile of the incident?

The vulnerability exploited in the incident
The manufacture of the system compromised
The nature of the attack
The logic, formatting and elegance of the code used in the attack

Answer(s): D

Reveal Solution Next Question

Free EC0-349 Exam Braindumps (page: 2)

Pass your EC0-349 ECCouncil Computer Hacking Forensic Investigator exam with these free Actual Questions and Answers

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

EC0-349 Exam Discussions & Posts