exam questions

Exam 312-49v10 All Questions

View all questions & answers for the 312-49v10 exam

Exam 312-49v10 topic 1 question 81 discussion

Actual exam question from ECCouncil's 312-49v10
Question #: 81
Topic #: 1
[All 312-49v10 Questions]

When you carve an image, recovering the image depends on which of the following skills?

  • A. Recognizing the pattern of the header content
  • B. Recovering the image from a tape backup
  • C. Recognizing the pattern of a corrupt file
  • D. Recovering the image from the tape backup
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
044f354
1 month, 1 week ago
Selected Answer: A
EC Council Official Curricula Computer Hacking Forensic Investigator https://bookshelf.vitalsource.com/reader/books/9781635676969/ Module 05 Pages 435 "Investigators can identify the files using certain characteristics such as file header (the first few bytes) and footer (the last few bytes). Investigators can analyze the file headers to verify the file format using tools such as 010 Editor, CI Hex Viewer, Hexinator, Hex Editor Neo, Qiew, WinHex, etc."
upvoted 1 times
...
vcloudpmp
7 months, 1 week ago
A. From EC Council materials: "n this technique, file identification and extraction is based on certain characteristics such as file header or footer rather than the file extension or metadata"
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago