Computer Hacking Forensic Investigator (CHFI) Free Practice Exam Questions

149 real Computer Hacking Forensic Investigator (CHFI) exam questions with answers and AI explanations. EC-Council certification prep — page 2 of 15.

1. Question 11: If you see the files Zer0.tar.gz and copy.tar.gz on a Linux system while doing an investigation, what can you conclude?
2. Question 12: What is the target host IP in the following command?
3. Question 13: What operating system would respond to the following command?
4. Question 14: Software firewalls work at which layer of the OSI model?
5. Question 15: What will the following command accomplish?
6. Question 16: In a FAT32 system, a 123 KB file will use how many sectors?
7. Question 17: How many sectors will a 125 KB file use in a FAT32 file system?
8. Question 18: What should you do when approached by a reporter about a case that you are working on or have worked on?
9. Question 19: What file is processed at the end of a Windows XP boot to initialize the logon dialog box?
10. Question 20: What type of equipment would a forensics investigator store in a StrongHold bag?