Exam Details

  • Exam Code
    :312-49V10
  • Exam Name
    :EC-Council Certified Computer Hacking Forensic Investigator (V10)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :1006 Q&As
  • Last Updated
    :Apr 12, 2025

EC-COUNCIL EC-COUNCIL Certifications 312-49V10 Questions & Answers

  • Question 451:

    You are working as Computer Forensics investigator and are called by the owner of an accounting firm to investigate possible computer abuse by one of the firm's employees. You meet with the owner of the firm and discover that the company has never published a policy stating that they reserve the right to inspect their computing assets at will. What do you do?

    A. Inform the owner that conducting an investigation without a policy is not a problem because the company is privately owned

    B. Inform the owner that conducting an investigation without a policy is a violation of the 4th amendment

    C. Inform the owner that conducting an investigation without a policy is a violation of the employees' expectation of privacy

    D. Inform the owner that conducting an investigation without a policy is not a problem because a policy is only necessary for government agencies

  • Question 452:

    Jason is the security administrator of ACMA metal Corporation. One day he notices the company's Oracle database server has been compromised and the customer information along with financial data has been stolen. The financial loss will be in millions of dollars if the database gets into the hands of the competitors. Jason wants to report this crime to the law enforcement agencies immediately. Which organization coordinates computer crimes investigations throughout the United States?

    A. Internet Fraud Complaint Center

    B. Local or national office of the U.S. Secret Service

    C. National Infrastructure Protection Center

    D. CERT Coordination Center

  • Question 453:

    You setup SNMP in multiple offices of your company. Your SNMP software manager is not receiving data from other offices like it is for your main office. You suspect that firewall changes are to blame. What ports should you open for SNMP to work through Firewalls (Select 2)

    A. 161

    B. 162

    C. 163

    D. 160

  • Question 454:

    When setting up a wireless network with multiple access points, why is it important to set each access point on a different channel?

    A. Avoid over-saturation of wireless signals

    B. So that the access points will work on different requencies

    C. Avoid cross talk

    D. Multiple access points can be set up on the same channel without any issues

  • Question 455:

    You are assisting in the investigation of a possible Web Server hack. The company who called you stated that customers reported to them that whenever they entered the web address of the company in their browser, what they received was a pornographic web site. The company checked the web server and nothing appears wrong. When you type in the IP address of the web site in your browser everything appears normal. What is the name of the attack that affects the DNS cache of the name resolution servers, resulting in those servers directing users to the wrong web site?

    A. ARP Poisoning

    B. DNS Poisoning

    C. HTTP redirect attack

    D. IP Spoofing

  • Question 456:

    A packet is sent to a router that does not have the packet destination address in its route table, how will the packet get to its properA packet is sent to a router that does not have the packet? destination address in its route table, how will the packet get to its proper destination?

    A. Border Gateway Protocol

    B. Root Internet servers

    C. Gateway of last resort

    D. Reverse DNS

  • Question 457:

    Why is it still possible to recover files that have been emptied from the Recycle Bin on a Windows computer?

    A. The data is still present until the original location of the file is used

    B. The data is moved to the Restore directory and is kept there indefinitely

    C. The data will reside in the L2 cache on a Windows computer until it is manually deleted

    D. It is not possible to recover data that has been emptied from the Recycle Bin

  • Question 458:

    A suspect is accused of violating the acceptable use of computing resources, as he has visited adult websites and downloaded images. The investigator wants to demonstrate that the suspect did indeed visit these sites. However, the suspect has cleared the search history and emptied the cookie cache. Moreover, he has removed any images he might have downloaded. What can the investigator do to prove the violation? Choose the most feasible option.

    A. Image the disk and try to recover deleted files

    B. Seek the help of co-workers who are eye-witnesses

    C. Check the Windows registry for connection data (You may or may not recover)

    D. Approach the websites for evidence

  • Question 459:

    It takes _____________ mismanaged case/s to ruin your professional reputation as a computer forensics examiner?

    A. by law, three

    B. quite a few

    C. only one

    D. at least two

  • Question 460:

    Harold is a web designer who has completed a website for ghttech.net. As part of the maintenance agreement he signed with the client, Harold is performing research online and seeing how much exposure the site has received so far. Harold navigates to google.com and types in the following search. link:www.ghttech.net What will this search produce?

    A. All search engines that link to .net domains

    B. All sites that link to ghttech.net

    C. Sites that contain the code: link:www.ghttech.net

    D. All sites that ghttech.net links to

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 312-49V10 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.