Online Access Free EC0-349 Exam Questions

You are conducting an investigation of fraudulent claims in an insurance company that involves complex text searches through large numbers of documents. Which of the following tools would allow you to quickly and efficiently search for a string within a file on the bitmap image of the target computer?

• A.grep
• B.dir
• C.Stringsearch
• D.vim

When the operating system marks cluster as used, but does not allocate them to any file, such clusters are known as ___________.

• A.Lost clusters
• B.Bad clusters
• C.Empty clusters
• D.Unused clusters

A steganographic file system is a method to store the files in a way that encrypts and hides the data without the knowledge of others

• A.False
• B.True

BMP (Bitmap) is a standard file format for computers running the Windows operating system.
BMP images can range from black and white (1 bit per pixel) up to 24 bit color (16.7 million colors). Each bitmap file contains header, the RGBQUAD array, information header, and image data. Which of the following element specifies the dimensions, compression type, and color format for the bitmap?

• A.Image data
• B.Header
• C.The RGBQUAD array
• D.Information header

What must an investigator do before disconnecting an iPod from any type of computer?

• A.Mount the iPod
• B.Unmount the iPod
• C.Disjoin the iPod
• D.Join the iPod