EC-COUNCIL EC1-349 Actual Free Exam Questions & Community Discussion

The Recycle Bin is located on the Windows desktop. When you delete an item from the hard disk, Windows sends that deleted item to the Recycle Bin and the icon changes to full from empty, but items deleted from removable media, such as a floppy disk or network drive, are not stored in the Recycle Bin.
What is the size limit for Recycle Bin in Vista and later versions of the Windows?

Hard disk data addressing is a method of allotting addresses to each ___________of data on a hard disk

Consistency in the investigative report is more important than the exact format in the report to eliminate uncertainty and confusion.

Syslog is a client/server protocol standard for forwarding log messages across an IP network. Syslog uses ___________to transfer log messages in a clear text format.

Mobile phone forensics is the science of recovering digital evidence from a mobile phone under forensically sound conditions.

Which of the following is not correct when documenting an electronic crime scene?

Which of the following statements is incorrect when preserving digital evidence?

A rogue/unauthorized access point is one that Is not authorized for operation by a particular firm or network

In what circumstances would you conduct searches without a warrant?

Network forensics allows Investigators 10 inspect network traffic and logs to identify and locate the attack system
Network forensics can reveal: (Select three answers)

When collecting evidence from the RAM, where do you look for data?

Steganography is a technique of hiding a secret message within an ordinary message and extracting it at the destination to maintain the confidentiality of data.