EC0-349 ECCouncil Computer Hacking Forensic Investigator
EC0-349 Exam

In what way do the procedures for dealing with evidence in a criminal case differ from the procedures for dealing with evidence in a civil case?

  1. evidence procedures are not important unless you work for a law enforcement agency
  2. evidence must be handled in the same way regardless of the type of case
  3. evidence in a civil case must be secured more tightly than in a criminal case
  4. evidence in a criminal case must be secured more tightly than in a civil case

Answer(s): B



Which part of the Windows Registry contains the user's password file?

  1. HKEY_LOCAL_MACHINE
  2. HKEY_CURRENT_CONFIGURATION
  3. HKEY_USER
  4. HKEY_CURRENT_USER

Answer(s): C



If a suspect's computer is located in an area that may have toxic chemicals, you must

  1. coordinate with the HAZMAT team
  2. do not enter alone
  3. assume the suspect machine is contaminated
  4. determine a way to obtain the suspect computer

Answer(s): A



Profiling is a forensics technique for analyzing evidence with the goal of identifying the perpetrator from their pervious activity. After a computer has been compromised by a hacker, which of the following would be most important in forming a profile of the incident?

  1. The vulnerability exploited in the incident
  2. The manufacture of the system compromised
  3. The nature of the attack
  4. The logic, formatting and elegance of the code used in the attack

Answer(s): D




Lee W.
Just thought I would let you know I took the CCDA test on Tuesday, like I planned and scored a 902!"
- China
Upvote


Micheal C.
I have used your Exams for preparation for 70-290, 70-291, 70-292, 70-296, 70-298, 70- 299, 70-300, 70-305, 70-310, 70-315, 70-316,70-320. I also passed all those on the first round. I'm currently preparing for the CCNA.
- ON
Upvote


kris J.
Now my dream has come true. I thank you a million times for the best study guides that you provided to a poor kid like me....I got it. Finally MCSE. Best regards,
- GERMANY
Upvote


Jason
I passed my CCNA exam yesterday. I would like to make some comments. "Excellent Study Guide, Excellent Support Service, Excellent Examination Web Site" Best Regards
- UNITED STATES
Upvote


Micheal
Thanks for your study guides, i have passed it. All questions in your material, we study this only 2 days. Thanks very very much!!!!!
- UNITED STATES
Upvote


L. Woo
Thanks very much for your study guides, with your help i only use 3 weeks to take the MCSE. Your study guides are very very good.
- China
Upvote


Mick H.
I passed the CCIE Written exam 350-001 last Friday, Thanks very much for your study guide and your help.
- UNITED STATES
Upvote


Hagit
i ust wanted to thank you folks at braindumgalaxy.com for your assistance. I used your CCNP exams for practice and to identify my weak areas. Passed the CCNP recert on Tuesday without any big problems.
- Israel
Upvote


Cisco Engineer
I have found that your resources are probably the best on the market...and I work at Cisco.
- UNITED STATES
Upvote


Koshani
A well Good morning Dear braindumpgalaxy.com Team I wanna say that I passed the 000-888 yesterday and i am happy
- UNITED STATES
Upvote

Read more ...