ECCouncil 312-49v11 Actual Exam Questions

Last updated on Nov. 25, 2025.

Topic 1 - Exam A

Question #1 Topic 1

A suspect is accused of violating the acceptable use of computing resources, as he has visited adult websites and downloaded images. The investigator wants to demonstrate that the suspect did indeed visit these sites. However, the suspect has cleared the search history and emptied the cookie cache. Moreover, he has removed any images he might have downloaded. What can the investigator do to prove the violation?

  • A. Image the disk and try to recover deleted files
  • B. Seek the help of co-workers who are eye-witnesses
  • C. Check the Windows registry for connection data (you may or may not recover)
  • D. Approach the website's administrator for evidence
Reveal Solution Hide Solution   Discussion  

Correct Answer: A 🗳️

Question #2 Topic 1

You have been asked to investigate the possibility of computer fraud in the finance department of a company. It is suspected that a staff member has been committing finance fraud by printing cheques that have not been authorized. You have exhaustively searched all data files on a bitmap image of the target computer, but have found no evidence. You suspect the files may not have been saved. What should you examine next in this case?

  • A. The registry
  • B. The swap file
  • C. The recycle bin
  • D. The metadata
Reveal Solution Hide Solution   Discussion  

Correct Answer: B 🗳️

Question #3 Topic 1

Which of the following are small pieces of data sent from a website and stored on the user’s computer by the user’s web browser to track, validate, and maintain specific user information?

  • A. Temporary Files
  • B. Open files
  • C. Cookies
  • D. Web Browser Cache
Reveal Solution Hide Solution   Discussion  

Correct Answer: C 🗳️

Question #4 Topic 1

Depending upon the jurisdictional areas, different laws apply to different incidents. Which of the following law is related to fraud and related activity in connection with computers?

  • A. 18 USC §1029
  • B. 18 USC §1030
  • C. 18 USC §1361
  • D. 18 USC §1371
Reveal Solution Hide Solution   Discussion  

Correct Answer: B 🗳️

file Viewing page 1 out of 38 pages.
Viewing questions 1-4 out of 150 questions
Next Questions
Browse atleast 50% to increase passing rate cup
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Loading ...