Logo ExamsQA
Exit
Official Bank 0/589

ECCouncil Computer Hacking Forensic Investigator (V9) (312-49v9) - EC-Council Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
589 Total Questions
1
Question
Bob has encountered a system crash and has lost vital data stored on the hard drive of his Windows computer. He has no cloud storage or backup hard drives. He wants to recover all the data, which includes his personal photos, music, documents, videos, official emails, etc. Which of the following tools shall resolve Bob's purpose?
Options
A Cain & Abel
B Colasoft’s Capsa
C Recuva
D Xplico
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
As a Certified Ethical Hacker, you were contracted by a private firm to conduct an external security assessment through penetration testing . What document describes the specifics of the testing, the associated violations, and essentially protects both the organization’s interest and your liabilities as a tester?
Options
A Project Scope
B Service Level Agreement
C Rules of Engagement
D Non-Disclosure Agreement
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Which federal computer crime law specifically refers to fraud and related activity in connection with access devices like routers?
Options
A 18 U.S.C. 1029
B 18 U.S.C. 2703
C 18 U.S.C. 1362
D 18 U.S.C. 2511
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
When examining a hard disk without a write-blocker, you should not start windows because

Windows will write data to the:
Options
A Recycle Bin
B Case files
C BIOS
D MSDOS.sys
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Pagefile.sys is a virtual memory file used to expand the physical memory of a computer. Select the registry path for the page file:
Options
A HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management
B HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters
C HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Device Management
D HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\System Management
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.