Exam 312-49v11 Topic 1 Question 307 Discussion

Actual exam question for EC-COUNCIL's 312-49v11 exam
Question #: 307
Topic #: 1
A digital forensics investigator is analyzing the memory dump from a suspicious computer using the Bulk Extractor tool. He found a domain associated with Gmail (mail.google.com) and an associated Gmail ID. From the json.txt file, he discovered an email composed from the browser with an attachment. He also found an opened email with a different attachment in the memory dump. After identifying these items, what should be the investigator's next immediate step?

Suggested Answer: B Vote an answer

by Tobey at Nov 23, 2025, 05:35 AM

Limited Time Offer

15%

Off

Get Premium 312-49v11 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10