PDF Version DemoEC-COUNCIL EC1-349 Exam Overview:
| Certification Vendor: | EC-Council |
|---|---|
| Exam Name: | EC-Council Computer Hacking Forensic Investigator (CHFI) Exam EC1-349 |
| Exam Number: | EC1-349 |
| Exam Format: | Scenario-based Questions, Multiple Choice Questions |
| Exam Duration: | 240 minutes |
| Related Certifications: | Certified Ethical Hacker (CEH) EC-Council Certified Security Analyst (ECSA) |
| Passing Score: | 70% |
| Exam Price: | $550 USD (may vary by region) |
| Available Languages: | English |
| Real Exam Qty: | 150 |
| Certificate Validity Period: | 3 years |
| Recommended Training: | EC-Council CHFI Official Training |
| Exam Registration: | EC-Council Official Certification Page |
| Sample Questions: | EC-COUNCIL EC1-349 Sample Questions |
| Exam Way: | Online proctored exam or authorized testing center |
| Pre Condition: | Basic knowledge of networking, operating systems, and cybersecurity fundamentals is recommended; CEH certification is beneficial but not mandatory. |
| Official Syllabus URL: | https://www.eccouncil.org/programs/computer-hacking-forensic-investigator-chfi/ |
EC-COUNCIL EC1-349 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Network and Internet Forensics | - Email and Web Application Forensics - Network Traffic Analysis |
| Malware and Data Forensics | - Malware Analysis Techniques - Data Recovery and Evidence Acquisition |
| Mobile and Cloud Forensics | - Mobile Device Forensics - Cloud Environment Investigation |
| Windows and Linux Forensics | - Linux File System and Log Analysis - Windows File System and Artifacts Analysis |
| Computer Forensics Fundamentals | - Introduction to Digital Forensics and Investigation Process - Legal and Ethical Issues in Forensics |
EC-COUNCIL Computer Hacking Forensic Investigator Sample Questions:
Question #1
Smith, as a part his forensic investigation assignment, has seized a mobile device. He was asked to recover the Subscriber Identity Module (SIM card) data the mobile device. Smith found that the SIM was protected by a Personal identification Number (PIN) code but he was also aware that people generally leave the PIN numbers to the defaults or use easily guessable numbers such as 1234. He unsuccessfully tried three PIN numbers that blocked the SIM card. What Jason can do in this scenario to reset the PIN and access SIM data?
A. He should contact the device manufacturer for a Temporary Unlock Code (TUK) to gain access to the SIM
B. He should again attempt PIN guesses after a time of 24 hours
C. He cannot access the SIM data in this scenario as the network operators or device manufacturers have no idea about a device PIN
D. He should ask the network operator for Personal Unlock Number (PUK) to gain access to the SIM
Question #2
What is static executable file analysis?
A. It is a process that consists of collecting information about and from an executable file without actually launching the file under any circumstances
B. It is a process that consists of collecting information about and from an executable file by launching the file under any circumstances
C. It is a process that consists of collecting information about and from an executable file without actually launching an executable file in a controlled and monitored environment
D. It is a process that consists of collecting information about and from an executable file by launching an executable file in a controlled and monitored environment
Question #3
Email spoofing refers to:
A. The forgery of an email header so that the message appears to have originated from someone or somewhere other than the actual source
B. Sending huge volumes of email to an address in an attempt to overflow the mailbox or overwhelm the server where the email address Is hosted to cause a denial-of-service attack
C. The criminal act of sending an illegitimate email, falsely claiming to be from a legitimate site in an attempt to acquire the user's personal or account information
D. A sudden spike of "Reply All" messages on an email distribution list, caused by one misdirected message
Question #4
Digital evidence validation involves using a hashing algorithm utility to create a binary or hexadecimal number that represents the uniqueness of a data set, such as a disk drive or file.
Which of the following hash algorithms produces a message digest that is 128 bits long?
A. SHA-1
B. SHA-512
C. CRC-32
D. MD5
Question #5
Which of the following statements is incorrect related to acquiring electronic evidence at crime scene?
A. The equipment is seized which is connected to the case, knowing the role of the computer which will indicate what should be taken
B. At the time of seizing process, you need to shut down the computer immediately
C. In warning banners, organizations give clear and unequivocal notice to intruders that by signing onto the system they are expressly consenting to such monitoring
D. Sample banners are used to record the system activities when used by the unauthorized user
Solutions:
| Question #1 Answer: D | Question #2 Answer: A | Question #3 Answer: A | Question #4 Answer: D | Question #5 Answer: B |
We are confident about the products and aim to help you pass with ease. In case of failure, we will provide a no hassle full money back guarantee for the purchasing fee.
0 Customer Reviews
Quality and ValueITbraindumps Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITbraindumps testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITbraindumps offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.