Pre-Summer Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: get65

ECCouncil Updated 312-49v10 Exam Questions and Answers by wiktor

Page: 24 / 26

ECCouncil 312-49v10 Exam Overview :

Exam Name: Computer Hacking Forensic Investigator (CHFI-v10)
Exam Code: 312-49v10 Dumps
Vendor: ECCouncil Certification: CHFI v10
Questions: 704 Q&A's Shared By: wiktor
Question 96

Which of the following file system uses Master File Table (MFT) database to store information about every file and directory on a volume?

Options:

A.

FAT File System

B.

ReFS

C.

exFAT

D.

NTFS File System

Discussion
Hendrix
Great website with Great Exam Dumps. Just passed my exam today.
Luka Apr 21, 2026
Absolutely. Cramkey Dumps only provides the latest and most updated exam questions and answers.
Amy
I passed my exam and found your dumps 100% relevant to the actual exam.
Lacey Apr 3, 2026
Yeah, definitely. I experienced the same.
Billy
It was like deja vu! I was confident going into the exam because I had already seen those questions before.
Vincent Apr 10, 2026
Definitely. And the best part is, I passed! I feel like all that hard work and preparation paid off. Cramkey is the best resource for all students!!!
Aryan
Absolutely rocked! They are an excellent investment for anyone who wants to pass the exam on the first try. They save you time and effort by providing a comprehensive overview of the exam content, and they give you a competitive edge by giving you access to the latest information. So, I definitely recommend them to new students.
Jessie Mar 31, 2026
did you use PDF or Engine? Which one is most useful?
Annabel
I recently used them for my exam and I passed it with excellent score. I am impressed.
Amirah Apr 23, 2026
I passed too. The questions I saw in the actual exam were exactly the same as the ones in the Cramkey Dumps. I was able to answer the questions confidently because I had already seen and studied them.
Question 97

Which of the following Windows-based tool displays who is logged onto a computer, either locally or remotely?

Options:

A.

Tokenmon

B.

PSLoggedon

C.

TCPView

D.

Process Monitor

Discussion
Question 98

Which of the following Perl scripts will help an investigator to access the executable image of a process?

Options:

A.

Lspd.pl

B.

Lpsi.pl

C.

Lspm.pl

D.

Lspi.pl

Discussion
Question 99

Gill is a computer forensics investigator who has been called upon to examine a seized computer. This computer, according to the police, was used by a hacker who gained access to numerous banking institutions to steal customer information. After preliminary investigations, Gill finds in the computer’s log files that the hacker was able to gain access to these banks through the use of Trojan horses. The hacker then used these Trojan horses to obtain remote access to the companies’ domain controllers. From this point, Gill found that the hacker pulled off the SAM files from the domain controllers to then attempt and crack network passwords. What is the most likely password cracking technique used by this hacker to break the user passwords from the SAM files?

Options:

A.

Syllable attack

B.

Hybrid attack

C.

Brute force attack

D.

Dictionary attack

Discussion
Page: 24 / 26
Title
Questions
Posted

312-49v10
PDF

$36.75  $104.99

312-49v10 Testing Engine

$43.75  $124.99

312-49v10 PDF + Testing Engine

$57.75  $164.99