Free EC0-349 Exam Braindumps
EC0-349 ECCouncil Computer Hacking Forensic Investigator Questions 106–110 (page: 23)

Updated On: 10-Feb-2026

Hackers can gain access to the Windows Registry and manipulate user passwords, DNS settings, access rights, or other features that they may need in order to accomplish their objectives. One simple method for loading an application at startup is to add an entry (key) to the following Registry hive:

  1. HKEY_CURRENT_USER\Microsoft\Default
  2. HKEY_LOCAL_MACHINE\Hardware\Windows\Start
  3. HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run
  4. HKEY_LOCAL_USER\Software\Microsoft\OldVersion\Load

Answer(s): C



Windows identifies which application to open a file with by examining which of the following?

  1. The file attributes
  2. The file signature at the beginning of the file
  3. The file signature at the end of the file
  4. The file extension

Answer(s): D



The efforts to obtain information before a trial by demanding documents, depositions, questions and answers written under oath, written requests for admissions of fact, and examination of the scene is a description of what legal term?

  1. Discovery
  2. Spoliation
  3. Detection
  4. Hearsay

Answer(s): A



If you plan to startup a suspect's computer, you must modify the _____________to ensure that you do not contaminate or alter data on the suspect's hard drive by booting to the hard drive.

  1. deltree command
  2. Scandisk utility
  3. CMOS
  4. Boot.sys

Answer(s): C



How many characters long is the fixed-length MD5 algorithm checksum of a critical system file?

  1. 32
  2. 64
  3. 48
  4. 16

Answer(s): A



Viewing page 23 of 76
Viewing questions 111 - 115 out of 374 questions


Post your Comments and Discuss EC-Council EC0-349 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!