EC-COUNCIL Computer Hacking Forensic Investigator (CHFI-v10) - 312-49v10 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Adam Is thinking of establishing a hospital In the US and approaches John, a software developer to build a site and host it for him on one of the servers, which would be used to store patient health records. He has learned from his legal advisors that he needs to have the server's log data reviewed and managed according to certain standards and regulations. Which of the following regulations are the legal advisors referring to?

A. Data Protection Act of 2018 B. Health Insurance Portability and Accountability Act of 1996 (HIPAA) C. Electronic Communications Privacy Act D. Payment Card Industry Data Security Standard (PCI DSS)

Discussion 0

Correct Answer: B Vote an answer

Question 2

You are working as an investigator for a corporation and you have just received instructions from your manager to assist in the collection of 15 hard drives that are part of an ongoing investigation.
Your job is to complete the required evidence custody forms to properly document each piece of evidence as it is collected by other members of your team. Your manager instructs you to complete one multi-evidence form for the entire case and a single-evidence form for each hard drive. How will these forms be stored to help preserve the chain of custody of the case?

A. All forms should be placed in the report file because they are now primary evidence in the case. B. All forms should be placed in an approved secure container because they are now primary evidence in the case. C. The multi-evidence form should be placed in an approved secure container with the hard drives and the single-evidence forms should be placed in the report file. D. The multi-evidence form should be placed in the report file and the single-evidence forms should be kept with each hard drive in an approved secure container.

Discussion 0

Correct Answer: D Vote an answer

Question 3

Sectors in hard disks typically contain how many bytes?

A. 256 B. 2048 C. 1024 D. 512

Discussion 0

Correct Answer: D Vote an answer

Question 4

NTFS sets a flag for the file once you encrypt it and creates an EFS attribute where it stores Data Decryption Field (DDF) and Data Recovery Field (DDR). Which of the following is not a part of DDF?

A. Checksum B. Encrypted FEK C. EFS Certificate Hash D. Container Name

Discussion 0

Correct Answer: A Vote an answer

Question 5

You need to deploy a new web-based software package for your organization. The package requires three separate servers and needs to be available on the Internet. What is the recommended architecture in terms of server placement?

A. A web server facing the Internet, an application server on the internal network, a database server on the internal network B. All three servers need to be placed internally C. A web server and the database server facing the Internet, an application server on the internal network D. All three servers need to face the Internet so that they can communicate between themselves

Discussion 0

Correct Answer: D Vote an answer

Question 6

What is the name of the first reserved sector in File allocation table?

A. Master Boot Record B. Partition Boot Sector C. BIOS Parameter Block D. Volume Boot Record

Discussion 0

Correct Answer: A Vote an answer

Question 7

How many bits is Source Port Number in TCP Header packet?

A. 48 B. 32 C. 64 D. 16

Discussion 0

Correct Answer: D Vote an answer

Question 8

A suspect is accused of violating the acceptable use of computing resources, as he has visited adult websites and downloaded images. The investigator wants to demonstrate that the suspect did indeed visit these sites. However, the suspect has cleared the search history and emptied the cookie cache. Moreover, he has removed any images he might have downloaded. What can the investigator do to prove the violation?

A. Check the Windows registry for connection data (you may or may not recover) B. Image the disk and try to recover deleted files C. Seek the help of co-workers who are eye-witnesses D. Approach the websites for evidence

Discussion 0

Correct Answer: B Vote an answer

Question 9

Where is the startup configuration located on a router?

A. Static RAM B. NVRAM C. Dynamic RAM D. BootROM

Discussion 0

Correct Answer: B Vote an answer