Free EC0-349 Exam Braindumps
EC0-349 ECCouncil Computer Hacking Forensic Investigator Questions 111–115 (page: 24)

Updated On: 10-Feb-2026

You have used a newly released forensic investigation tool, which doesn't meet the Daubert Test, during a case. The case has ended-up in court. What argument could the defense make to weaken your case?

  1. You are not certified for using the tool
  2. The tool has not been reviewed and accepted by your peers
  3. Only the local law enforcement should use the tool
  4. The tool hasn't been tested by the International Standards Organization (ISO)

Answer(s): B



Which of the following filesystem is used by Mac OS X?

  1. HFS+
  2. EFS
  3. EXT2
  4. NFS

Answer(s): A



While working for a prosecutor, what do you think you should do if the evidence you found appears to be exculpatory and is not being released to the defense?

  1. destroy the evidence
  2. bring the information to the attention of the prosecutor, his or her supervisor or finally to the judge (court)
  3. present the evidence to the defense attorney
  4. keep the information on file for later review

Answer(s): B



In Microsoft file structures, sectors are grouped together to form

  1. drives
  2. clusters
  3. partitions
  4. bitstreams

Answer(s): B



In a computer forensics investigation, what describes the route that evidence takes from the time you find it until the case is closed or goes to court?

  1. law of probability
  2. rules of evidence
  3. policy of separation
  4. chain of custody

Answer(s): D



Viewing page 24 of 76
Viewing questions 116 - 120 out of 374 questions


Post your Comments and Discuss EC-Council EC0-349 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!