1. Home
  2. EC-COUNCIL
  3. 312-49V9

EC-Council Certified Computer Hacking Forensic Investigator (V9)

Exam Details

  • Exam Code
    :312-49V9
  • Exam Name
    :EC-Council Certified Computer Hacking Forensic Investigator (V9)
  • Certification
    :EC-COUNCIL Certifications
  • Vendor
    :EC-COUNCIL
  • Total Questions
    :531 Q&As
  • Last Updated
    :Apr 14, 2025

EC-COUNCIL EC-COUNCIL Certifications 312-49V9 Questions & Answers

  • Question 161:

    Your company uses Cisco routers exclusively throughout the network. After securing the routers to the best of your knowledge, an outside security firm is brought in to assess the network security. Although they found very few issues, they were able to enumerate the model, OS version, and capabilities for all your Cisco routers with very little effort. Which feature will you disable to eliminate the ability to enumerate this information on your Cisco routers?

    A. Simple Network Management Protocol

    B. Cisco Discovery Protocol

    C. Border Gateway Protocol

    D. Broadcast System Protocol

  • Question 162:

    Sniffers that place NICs in promiscuous mode work at what layer of the OSI model?

    A. Network

    B. Transport

    C. Physical

    D. Data Link

  • Question 163:

    When you carve an image, recovering the image depends on which of the following skills?

    A. Recognizing the pattern of the header content

    B. Recovering the image from a tape backup

    C. Recognizing the pattern of a corrupt file

    D. Recovering the image from the tape backup

  • Question 164:

    If you come across a sheepdip machine at your client site, what would you infer?

    A. A sheepdip coordinates several honeypots

    B. A sheepdip computer is another name for a honeypot

    C. A sheepdip computer is used only for virus-checking.

    D. A sheepdip computer defers a denial of service attack

  • Question 165:

    You are working as a computer forensics investigator for a corporation on a computer abuse case. You discover evidence that shows the subject of your investigation is also embezzling money from the company. The company CEO and the corporate legal counsel advise you to contact local law enforcement and provide them with the evidence that you have found. The law enforcement officer that responds requests that you put a network sniffer on your network and monitor all traffic to the subject computer. You inform the officer that you will not be able to comply with thatnetwork sniffer on your network and monitor all traffic to the subject? computer. You inform the officer that you will not be able to comply with that request because doing so would:

    A. Violate your contract

    B. Cause network congestion

    C. Make you an agent of law enforcement

    D. Write information to the subject hard driveWrite information to the subject? hard drive

  • Question 166:

    You just passed your ECSA exam and are about to start your first consulting job running security audits for a financial institution in Los Angeles. The IT manager of the company you will be working for tries to see if you remember your ECSA class. He asks about the methodology you will be using to test the company's network. How would you answer?

    A. IBM Methodology

    B. Microsoft Methodology

    C. Google Methodology

    D. LPT Methodology

  • Question 167:

    Before you are called to testify as an expert, what must an attorney do first?

    A. engage in damage control

    B. prove that the tools you used to conduct your examination are perfect

    C. read your curriculum vitae to the jury

    D. qualify you as an expert witness

  • Question 168:

    What type of analysis helps to identify the time and sequence of events in an investigation?

    A. Time-based

    B. Functional

    C. Relational

    D. Temporal

  • Question 169:

    What does ICMP Type 3/Code 13 mean?

    A. Administratively Blocked

    B. Host Unreachable

    C. Protocol Unreachable

    D. Port Unreachable

  • Question 170:

    You are working on a thesis for your doctorate degree in Computer Science. Your thesis is based on HTML, DHTML, and other web-based languages and how they have evolved over the years. You navigate to archive. org and view the HTML code of news.com. You then navigate to the current news.com website and copy over the source code. While searching through the code, you come across something abnormal: What have you found?

    A. Web bug

    B. CGI code

    C. Trojan.downloader

    D. Blind bug

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only EC-COUNCIL exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 312-49V9 exam preparations and EC-COUNCIL certification application, do not hesitate to visit our Vcedump.com to find your solutions here.