Free EC-COUNCIL 312-49v9 Exam Dumps Questions & Answers

When cataloging digital evidence, the primary goal is to

• A.  Not allow the computer to be turned off
• B.  Preserve evidence integrity
• C.  Make bit-stream images of all hard drives
• D.  Not remove the evidence from the scene

To check for POP3 traffic using Ethereal, what port should an investigator search by?

• A.  125
• B.  110
• C.  143
• D.  25

E-mail logs contain which of the following information to help you in your investigation? (Choose four.)

• A.  contents of the e-mail message
• B.  date and time the message was sent
• C.  attachments sent with the e-mail message
• D.  unique message identifier
• E.  user account that was used to send the account

Which file is a sequence of bytes organized into blocks understandable by the system's linker?

• A.  source file
• B.  executable file
• C.  None of these
• D.  Object file

Which of the following Linux command searches through the current processes and lists the process IDs those match the selection criteria to stdout?

• A.  grep
• B.  pgrep
• C.  ps
• D.  pstree