eccouncil-312-49v10

eccouncil-312-49v10 practice questions, page 16 of 34, with answer review and explanations.

Question 76

Windows identifies which application to open a file with by examining which of the following?

  1. The File extension
  2. The file attributes
  3. The file Signature at the end of the file
  4. The file signature at the beginning of the file

Question 77

You have used a newly released forensic investigation tool, which doesn't meet the Daubert Test, during a case. The case has ended-up in court. What argument could the defense make to weaken your case?

  1. The tool hasn't been tested by the International Standards Organization (ISO)
  2. Only the local law enforcement should use the tool
  3. The total has not been reviewed and accepted by your peers
  4. You are not certified for using the tool

Question 78

Which of the following is NOT a graphics file?

  1. Picture1.tga
  2. Picture2.bmp
  3. Picture3.nfo
  4. Picture4.psd

Question 79

When conducting computer forensic analysis, you must guard against ______________ So that you remain focused on the primary job and insure that the level of work does not increase beyond what was originally expected.

  1. Hard Drive Failure
  2. Scope Creep
  3. Unauthorized expenses
  4. Overzealous marketing

Question 80

In General, __________________ Involves the investigation of data that can be retrieved from the hard disk or other disks of a computer by applying scientific methods to retrieve the data.

  1. Network Forensics
  2. Data Recovery
  3. Disaster Recovery
  4. Computer Forensics