Pre-Winter Sale Limited Time 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: big60

ECCouncil Updated 312-49v10 Exam Questions and Answers by dennis

Page: 20 / 26

ECCouncil 312-49v10 Exam Overview :

Exam Name: Computer Hacking Forensic Investigator (CHFI-v10)
Exam Code: 312-49v10 Dumps
Vendor: ECCouncil Certification: CHFI v10
Questions: 704 Q&A's Shared By: dennis
Question 80

According to RFC 3227, which of the following is considered as the most volatile item on a typical system?

Options:

A.

Registers and cache

B.

Temporary system files

C.

Archival media

D.

Kernel statistics and memory

Discussion
Question 81

Maria has executed a suspicious executable file In a controlled environment and wants to see if the file adds/modifies any registry value after execution via Windows Event Viewer. Which of the following event ID should she look for In this scenario?

Options:

A.

Event ID 4657

B.

Event ID 4624

C.

Event ID 4688

D.

Event ID 7040

Discussion
Addison
Want to tell everybody through this platform that I passed my exam with excellent score. All credit goes to Cramkey Exam Dumps.
Libby Oct 3, 2025
That's good to know. I might check it out for my next IT certification exam. Thanks for the info.
Nylah
I've been looking for good study material for my upcoming certification exam. Need help.
Dolly Oct 2, 2025
Then you should definitely give Cramkey Dumps a try. They have a huge database of questions and answers, making it easy to study and prepare for the exam. And the best part is, you can be sure the information is accurate and relevant.
Stefan
Thank you so much Cramkey I passed my exam today due to your highly up to date dumps.
Ocean Oct 15, 2025
Agree….Cramkey Dumps are constantly updated based on changes in the exams. They also have a team of experts who regularly review the materials to ensure their accuracy and relevance. This way, you can be sure you're studying the most up-to-date information available.
Vienna
I highly recommend them. They are offering exact questions that we need to prepare our exam.
Jensen Oct 11, 2025
That's great. I think I'll give Cramkey a try next time I take a certification exam. Thanks for the recommendation!
Ivan
I tried these dumps for my recent certification exam and I found it pretty helpful.
Elis Oct 11, 2025
Agree!!! The questions in the dumps were quite similar to what came up in the actual exam. It gave me a good idea of the types of questions to expect and helped me revise efficiently.
Question 82

A company’s policy requires employees to perform file transfers using protocols which encrypt traffic. You suspect some employees are still performing file transfers using unencrypted protocols because the employees don’t like changes. You have positioned a network sniffer to capture traffic from the laptops used by employees in the data ingest department. Using Wireshark to examine the captured traffic, which command can be used as a display filter to find unencrypted file transfers?

Options:

A.

tcp.port = 23

B.

tcp.port == 21

C.

tcp.port == 21 || tcp.port == 22

D.

tcp.port != 21

Discussion
Question 83

Which of the following network attacks refers to sending huge volumes of email to an address in an attempt to overflow the mailbox or overwhelm the server where the email address is hosted so as to cause a denial-of-service attack?

Options:

A.

Email spamming

B.

Phishing

C.

Email spoofing

D.

Mail bombing

Discussion
Page: 20 / 26
Title
Questions
Posted

312-49v10
PDF

$42  $104.99

312-49v10 Testing Engine

$50  $124.99

312-49v10 PDF + Testing Engine

$66  $164.99