Smartly Prepare Exam with Free Online 312-49v10 Practice Test

We offer the latest 312-49v10 practice test designed for free and effective online Computer Hacking Forensic Investigator (CHFI v10) certification preparation. It's a simulation of the real 312-49v10 exam experience, built to help you understand the structure, complexity, and topics you'll face on exam day.

Question 1

A breach resulted from a malware attack that evaded detection and compromised the machine memory without installing any software or accessing the hard drive. What technique did the adversaries use to deliver the attack?

Options :

A : Fileless

B : Trojan

C : JavaScript

D : Spyware

Answer: A

Question 2

An executive has leaked the company trade secrets through an external drive. What process should the

investigation team take if they could retrieve his system?

Options :

A :

Postmortem Analysis

B :

Real-Time Analysis

C : Packet Analysis

D :

Malware Analysis

Answer: A

Question 3

During the course of an investigation, you locate evidence that may prove the innocence of the suspect of the

investigation. You must maintain an unbiased opinion and be objective in your entire fact finding process.

Therefore, you report this evidence. This type of evidence is known as:

Options :

A : Inculpatory evidence

B : Mandatory evidence

C :

Exculpatory evidence

D :

Terrible evidence

Answer: C

Question 4

The Recycle Bin exists as a metaphor for throwing files away, but it also allows a user to retrieve and restore

files. Once the file is moved to the recycle bin, a record is added to the log file that exists in the Recycle Bin.

Which of the following files contains records that correspond to each deleted file in the Recycle Bin?

Options :

A : INFO2

B : INFO1

C : LOGINFO1

D : LOGINFO2

Answer: A

Question 5

Which of the following is the most effective tool for acquiring volatile data from a Windows-based system?

Options :

A : Coreography

B : Datagrab

C : Ethereal

D : Helix

Answer: D