Free EC-COUNCIL EC1-349 Exam Dumps Questions & Answers


Exam Code/Number:	EC1-349Join the discussion
Exam Name:	Computer Hacking Forensic Investigator Exam
Certification:	EC-COUNCIL
Free Question Number:	180
Publish Date:	Aug 23, 2026
# of views:	2996
Rating 100%

Page: 1 / 36
Total 180 questions

Question 1

The Apache server saves diagnostic information and error messages that it encounters while processing requests. The default path of this file is usr/local/apache/logs/error.log in Linux. Identify the Apache error log from the following logs.

A.127.0.0.1 - frank [10/Oct/2000:13:55:36-0700] "GET /apache_pb.grf HTTP/1.0" 200 2326
B.[Wed Oct 11 14:32:52 2000] [error] [client 127.0.0.1] client denied by server configuration: /export/home/live/ap/htdocs/test
C.127.0.0.1 --[10/Apr/2007:10:39:11 +0300] ] [error] "GET /apache_pb.gif HTTP/1.0' 200 2326
D.http://victim.com/scripts/..%c0%af./..%c0%af./..%c0%af./..%c0%af./..%c0%af./..%c0%af./..%c0%af ./..%c0%af./../winnt/system32/cmd.exe?/c+di r+c:\wintt\system32\Logfiles\W3SVC1

Question 2

Which of the following commands shows you all of the network services running on Windows-based servers?

A.Net start
B.Net Session
C.Net share
D.Net use

Question 3

Mobile phone forensics is the science of recovering digital evidence from a mobile phone under forensically sound conditions.

A.False
B.True

Question 4

What is the first step that needs to be carried out to investigate wireless attacks?

A.Obtain a search warrant
B.Identify wireless devices at crime scene
C.Detect the wireless connections
D.Document the scene and maintain a chain of custody

Question 5

Damaged portions of a disk on which no read/Write operation can be performed is known as ______________.

A.Bad sector
B.Empty sector
C.Unused sector
D.Lost sector