312-49v10 Free Practice Test

- (Exam Topic 2)
Files stored in the Recycle Bin in its physical location are renamed as Dxy.ext, where “x” represents the
__________.

1. A. Drive name
2. B. Original file name’s extension
3. C. Sequential number
4. D. Original file name

Correct Answer: A

- (Exam Topic 3)
Which component in the hard disk moves over the platter to read and write information?

1. A. Actuator
2. B. Spindle
3. C. Actuator Axis
4. D. Head

Correct Answer: D

- (Exam Topic 3)
What does the command “C:>wevtutil gl ” display?

1. A. Configuration information of a specific Event Log
2. B. Event logs are saved in .xml format
3. C. Event log record structure
4. D. List of available Event Logs

Correct Answer: A

- (Exam Topic 2)
Jason discovered a file named $RIYG6VR.doc in the C:$Recycle.Bin while analyzing a hard disk image for the deleted data. What inferences can he make from the file name?

1. A. It is a doc file deleted in seventh sequential order
2. B. RIYG6VR.doc is the name of the doc file deleted from the system
3. C. It is file deleted from R drive
4. D. It is a deleted doc file

Correct Answer: D

- (Exam Topic 3)
Which of the following is NOT a physical evidence?

1. A. Removable media
2. B. Cables
3. C. Image file on a hard disk
4. D. Publications

Correct Answer: C