Computer Hacking Forensic Investigator (CHFI) Free Practice Exam Questions

149 real Computer Hacking Forensic Investigator (CHFI) exam questions with answers and AI explanations. EC-Council certification prep — page 12 of 15.

1. Question 115: In handling computer-related incidents, which IT role should be responsible for recovery, containment, and prevention to constituents?
2. Question 116: In the context of file deletion process, which of the following statement holds true?
3. Question 117: Which part of the Windows Registry contains the user's password file?
4. Question 118: When investigating a potential e-mail crime, what is your first step in the investigation?
5. Question 119: Sniffers that place NICs in promiscuous mode work at what layer of the OSI model?
6. Question 120: What does 254 represent in ICCID 89254021520014515744?
7. Question 121: When examining a hard disk without a write-blocker, you should not start windows because Windows will write data to the:
8. Question 122: John and Hillary works at the same department in the company. John wants to find out Hillary's network password so he can take a look at her documents on the f…
9. Question 123: Volatile Memory is one of the leading problems for forensics. Worms such as code Red are memory resident and do write themselves to the hard drive, if you turn…
10. Question 124: The newer Macintosh Operating System is based on: