One purchase should cover the whole journey from first download to exam day, not just a stack of questions. ExamTorrent bundles 490 verified practice questions for the EC0-349 exam with 365 days of free updates, a free demo, and support that stays reachable throughout.
EC-COUNCIL EC0-349 Exam Overview:
| Certification Vendor: | EC-Council |
|---|---|
| Exam Name: | EC-Council Computer Hacking Forensic Investigator (CHFI) |
| Exam Number: | 312-49 |
| Real Exam Qty: | 150 |
| Exam Price: | USD $950 |
| Related Certifications: | CSEH CCISO CEH (Certified Ethical Hacker) |
| Exam Format: | Multiple Choice |
| Exam Duration: | 4 hours (240 minutes) |
| Certificate Validity Period: | 3 years (requires renewal) |
| Passing Score: | 70% |
| Available Languages: | English |
| Sample Questions: |  |
| Exam Way: | Online (via ECC EXAM portal) / At authorized testing centers (Pearson VUE) |
| Pre Condition: | Recommended: CEH (Certified Ethical Hacker) certification or equivalent experience; minimum 2 years of information security experience recommended |
| Official Syllabus URL: | https://www.eccouncil.org/test-centers/ |
EC-COUNCIL EC0-349 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Module 4: Data Acquisition and Duplication | 8% | - Static Acquisition Methods - Validation and Hash Verification - Live Acquisition Methods - Data Acquisition Fundamentals |
| Topic 2: Module 1: Computer Forensics in Today's World | 4% | - Forensics Science, Evidence, and Ethics - Forensic Investigation Methodology - Digital Forensics and Its Relevance in Today's World |
| Topic 3: Module 9: Web Application Forensics | 7% | - Web Application Attacks - Web Log Analysis - Investigating Web Application Attacks |
| Topic 4: Module 11: Database Forensics | 6% | - SQLite and NoSQL Forensics - MySQL and MSSQL Forensics - Database Fundamentals |
| Topic 5: Module 2: Forensics Lab Setup | 3% | - Setting Up an Evidence Acquisition Environment - Hardware and Software Requirements |
| Topic 6: Module 7: Network Forensics | 8% | - Log Analysis and SIEM - Network Fundamentals - Intrusion Detection and Prevention - Investigating Network Traffic |
| Topic 7: Module 5: Understanding Windows and Linux Forensics | 10% | - Registry Analysis - Linux/Unix Forensics - Windows Forensics - Event Log Analysis |
| Topic 8: Module 14: Email Forensics | 4% | - Email Header Analysis - Email Forensics Tools - Email Tracking and Recovery |
| Topic 9: Module 3: Understanding Hard Disks and File Systems | 10% | - RAID and Storage Area Networks (SAN) - Disk Partitions and Boot Process - File Systems (NTFS, FAT, ext2/ext3/ext4, HFS+) - Hard Disk Drive Architecture |
| Topic 10: Module 10: Dark Web Forensics | 5% | - Investigating Dark Web Activities - Dark Web and Deep Web Concepts - Dark Web Forensics Tools |
| Topic 11: Module 13: Malware Forensics | 7% | - Identifying and Extracting Malware - Static Malware Analysis - Dynamic Malware Analysis |
| Topic 12: Module 12: Cloud Forensics | 7% | - Cloud Forensics Challenges - Cloud Computing Concepts - Investigation Techniques for Cloud |
| Topic 13: Module 15: Report Writing and Presentation | 3% | - Forensic Report Writing Guidelines - Evidence Presentation - Legal Considerations |
| Topic 14: Module 6: Device Forensics | 8% | - Mobile Forensics - GPS Device Forensics - Tablet Forensics - IoT Device Forensics |
| Topic 15: Module 8: Attack and Attack Analysis | 10% | - Malware Analysis Techniques - Denial of Service (DoS/DDoS) Attacks - Malware and Malware Analysis - Ransomware Analysis |
EC0-349 Exam: Frequently Asked Questions
This package includes 490 practice questions for the EC-COUNCIL Computer Hacking Forensic Investigator exam. Every answer is verified by an experienced team of experts, so you can trust what you study.
The EC-COUNCIL Computer Hacking Forensic Investigator exam requires a score of 70% to pass, and the official registration fee is USD $950. Factoring in both before you start helps you plan the full cost of certification.
One purchase covers the full journey: three versions of the material (PDF, PC test engine, and online version), a free demo to try before buying, 365 days of free updates delivered automatically, and customer service you can reach whenever a question comes up. Nothing essential is sold separately.
The EC-COUNCIL Computer Hacking Forensic Investigator practice questions are organized around the official exam objectives. Key topics include:
- Module 14: Email Forensics (4%)
- Module 13: Malware Forensics (7%)
- Module 2: Forensics Lab Setup (3%)
Keeping your revision mapped to these objectives makes every session productive.
Yes. Candidates who come back for additional certifications receive discounts when they buy further practice packages. If you already hold one of our products, ask our staff about the current returning-customer offer before your next purchase.
Recommended: CEH (Certified Ethical Hacker) certification or equivalent experience; minimum 2 years of information security experience recommended
You can confirm the current eligibility requirements on the official EC0-349 exam page before you register.
The EC-COUNCIL Computer Hacking Forensic Investigator exam contains 150 questions, and you will have 4 hours (240 minutes) minutes to complete them. Training against the same volume of questions prepares both your knowledge and your pace.
EC-COUNCIL Computer Hacking Forensic Investigator Sample Questions:
You are the security analyst working for a private company out of France. Your current assignment is to obtain credit card information from a Swiss bank owned by that company. After initial reconnaissance, you discover that the bank security defenses are very strong and would take too long to penetrate. You decide to get the information by monitoring the traffic between the bank and one of its subsidiaries in London. After monitoring some of the traffic, you see a lot of FTP packets traveling back and forth. You want to sniff the traffic and extract usernames and passwords. What tool could you use to get this information?
- A. Airsnort
- B. RaidSniff
- C. Snort
- D. Ettercap
Correct Answer: D 🗳️
You work as a penetration tester for Hammond Security Consultants. You are currently working on a contract for the state government of California. Your next step is to initiate a DoS attack on their network. Why would you want to initiate a DoS attack on a system you are testing?
- A. List weak points on their network
- B. Show outdatedeQuipment so it can be replaced
- C. Use attack as a launching point to penetrate deeper into the network
- D. Demonstrate that no system can be protected againstDoS attacks
Correct Answer: A 🗳️
What is the first step taken in an investigation for laboratory forensic staff members?
- A. Conducting preliminary interviews
- B. Securing and evaluating the electronic crime scene
- C. Transporting the electronic evidence
- D. Packaging the electronic evidence
Correct Answer: B 🗳️
Where is the default location for Apache access logs on a Linux computer?
- A. usr/logs/access_log
- B. bin/local/home/apache/logs/access_log
- C. usr/local/apache/logs/access_log
- D. logs/usr/apache/access_log
Correct Answer: C 🗳️
When investigating a network that uses DHCP to assign IP addresses, where would you look to determine which system (MAC address) had a specific IP address at a specific time?
- A. In the DHCP Server log files
- B. On the individual computer ARP cacheOn the individual computer? ARP cache
- C. In the Web Server log files
- D. There is no way to determine the specific IP address
Correct Answer: A 🗳️
Viewing page 1 out of 98 pages.
Viewing questions 1-5 out of 490 questions.
932 Customer Reviews
