Logo ExamsQA
Exit
Official Bank 0/704

ECCouncil Computer Hacking Forensic Investigator (V9) Exam (312-49) - EC-Council Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
704 Total Questions
1
Question
Which of the following refers to the data that might still exist in a cluster even though the original file has been overwritten by another file?
Options
A MFT
B Sector
C Metadata
D Slack Space
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
When a user deletes a file or folder, the system stores complete path including the original filename is a special hidden file called “INFO2” in the Recycled folder. If the INFO2 file is deleted, it is recovered when you ______________________.
Options
A Use a recovery tool to undelete the file
B Undo the last action performed on the system
C Reboot Windows
D Download the file from Microsoft website
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
When reviewing web logs, you see an entry for resource not found in the HTTP status code filed.

What is the actual error code that you would see in the log for resource not found?
Options
A 505
B 202
C 404
D 909
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Which of the following statements is TRUE with respect to the Registry settings in the user start-up folder HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\.
Options
A All the values in this subkey run when specific user logs on, as this setting is user-specific
B All the values in this key are executed at system start-up
C The string specified in the value run executes when user logs on
D All values in this subkey run when specific user logs on and then the values are deleted
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Bob has encountered a system crash and has lost vital data stored on the hard drive of his Windows computer. He has no cloud storage or backup hard drives. he wants to recover all those data, which includes his personal photos, music, documents, videos, official email, etc. Which of the following tools shall resolve Bob’s purpose?
Options
A Cain & Abel
B Colasoft’s Capsa
C Recuva
D Xplico
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.