Free EC0-349 Exam Braindumps
EC0-349 ECCouncil Computer Hacking Forensic Investigator Questions 101–105 (page: 22)

Updated On: 10-Feb-2026

What is the name of the standard Linux command that is also available as a Windows application that can be used to create bit-stream images?

  1. dd
  2. mcopy
  3. image
  4. MD5

Answer(s): A



Which of following refers to the data that might still exist in a cluster even though the original file has been overwritten by another file?

  1. Sector
  2. Slack Space
  3. MFT
  4. Metadata

Answer(s): B



Which part of the Windows Registry contains the user's password file?

  1. HKEY_LOCAL_MACHINE
  2. HKEY_CURRENT_USER
  3. HKEY_CURRENT_CONFIGURATION
  4. HKEY_USER

Answer(s): D



E-mail logs contain which of the following information to help you in your investigation?

  1. user account that was used to send the message
  2. date and time the message was sent
  3. contents of the e-mail message
  4. unique message identifier
  5. attachments sent with the e-mail message

Answer(s): A,B,C,E



If a suspect's computer is located in an area that may have toxic chemicals, you must

  1. coordinate with the HAZMAT team
  2. determine a way to obtain the suspect computer
  3. do not enter alone
  4. assume the suspect machine is contaminated

Answer(s): A



Viewing page 22 of 76
Viewing questions 106 - 110 out of 374 questions


Post your Comments and Discuss EC-Council EC0-349 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!