ECCouncil Computer Hacking Forensic Investigator (V9) Exam (312) - EC Council Actual Exam Questions
Last updated on April 20, 2026
If you plan to startup a suspect's computer, you must modify the ___________ to ensure that you do not contaminate or alter data on the suspect's hard drive by booting to the hard drive.
deltree command
CMOS
Boot.sys
Scandisk utility
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
The objective of this act was to protect consumers’ personal financial information held by financial institutions and their service providers.
Gramm-Leach-Bliley Act
Sarbanes-Oxley 2002
California SB 1386
HIPAA
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Software firewalls work at which layer of the OSI model?
Application
Network
Transport
Data Link
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
When analyzing logs, it is important that the clocks of all the network devices are synchronized. Which protocol will help in synchronizing these clocks?
UTC
PTP
Time Protocol
NTP
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Which of the following does not describe the type of data density on a hard disk?
Volume density
Track density
Linear or recording density
Areal density
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.