Computer Hacking Forensic Investigator (312-49) Practice Exam
Computer Hacking Forensic Investigator (312-49) Exam
About Computer Hacking Forensic Investigator (CHFI) 312-49 Exam
Computer Hacking Forensic Investigator (CHFI) 312-49 certification exam is a professional certificate on the forensics of computer crimes and hacking from EC-Council. Hacking forensics is a part of digital forensics which focuses on detecting hacking or computer crime, obtaining evidence for crime reporting and auditing to prevent such attacks in future. With increased concern for digital security and rise in digital crimes, hacking and malware, it becomes paramount to hire Computer Hacking Forensic Investigators.
Who should take the exam?
The Computer Hacking Forensic Investigator (CHFI) Exam is apt for professionals engaged in information security, system administration law enforcement, IT management and IT operations. The CHFI certification endorses your skills in footprinting intruder and gathering evidence for the prosecution in the court of law and enforcing policies to avert future incidents.
Course Structure
Computer Hacking Forensic Investigator (312-49) covers the following topics -
Domain 1 - Forensic Science - 15% (22 questions)
- Computer Forensics Objective and Need
- Forensics Readiness
- Cyber Crime
- Web Applications and Webservers Attacks
- Email Crimes
- Network Attacks
- Forensics on Mobile Devices
- Cyber Crime Investigation
- Computer Forensics Investigation Methodology
- Reporting a Cyber Crime
- Expert Witness
Domain 2 - Regulations, Policies and Ethics - 10% (15 questions)
- Searching and Seizing Computers with and without a Warrant
- Laws and Acts against Email Crimes
- Laws pertaining to Log Management
- Policies Pertaining to Mobile Forensics
- Laws and Acts against Email Crimes
- General Ethics While Testifying
Domain 3 - Digital Evidence - 20% (30 questions)
- Digital Evidence
- Types of Digital Evidence
- Rules of Evidence
- Electronic Evidence: Types and Collecting Potential Evidence
- Electronic Crime and Digital Evidence Consideration by Crime Category
- Computer Forensics Lab
- Understanding Hard Disks
- Disk Partitions and Boot Process
- Understanding File Systems
- Windows File Systems
- Linux File Systems
- Mac OS X File Systems
- RAID Storage System
- File Carving
- Image Files
- Analyze Logs
- Database Forensics
- Email Headers
- Analyzing Email headers
- Malware Analysis
- Mobile Operating Systems
Domain 4 - Procedures and Methodology - 20% (30 questions)
- Investigating Computer Crime
- Computer Forensics Investigation Methodology
- Digital Evidence Examination Process
- Encryption
- First Responder
- First Response Basics
- Roles of First Responder
- Data Acquisition and Duplication
- Defeating Anti-forensics Techniques
- Log Management and Event Correlation
- Network Forensics (Intrusion Detection Systems (IDS))
- Computer Forensics Reports and Investigative Report Writing
Domain 5 - Digital Forensics - 25% (37 questions)
- Recover Data
- File System Analysis
- Windows Forensics
- Linux Forensics
- MAC Forensics
- Recovering the Deleted Files and Partitions
- Steganography and Image File Forensics
- Steganalysis
- Application Password Crackers
- Investigating and Analyzing Logs
- Investigating Network Traffic
- Investigating Wireless Attacks
- Web Attack Investigation
- Investigating Email Crime and Violation
- Mobile Forensic Process
- Cloud Forensics
- Malware Forensics
- Defeating Anti-Forensic Techniques
Domain 6 - Tools/Systems/ Programs - 10% (16 questions)
- First Responder Toolkit
- Windows Forensic Tools (Helix3 Pro, X-Ways Forensics, Windows Forensic Toolchest (WFT), Autopsy, The Sleuth Kit (TSK), etc.)
- Data Acquisition Software Tools UltraKit Forensic Falcon, etc.)
- Tools to defeat Anti-Forensics
- Steganography Tools
- Database Forensics Tools
- Password Cracking Tools
- Network Forensics Tools
- Web Security Tools, Firewalls, Log Viewers, and Web Attack Investigation Tools
- Cloud Forensics Tools
- Malware Forensics Tools
- Email Forensics Tools
- Mobile Forensics Software and Hardware Tools
- Report Writing Tools
Exam Pattern
- Exam Name: Computer Hacking Forensic Investigator (CHFI)
- Exam Code: 312-49 (ECC EXAM)
- Number of Questions: 150
- Length of Time: 240 Minutes
- Registration Fee: $650.00
- Passing Score: 60% to 85% depending upon the cut score for the exam
- Exam Language English
What do we offer?
- Full-Length Mock Test with unique questions in each test set
- Practice objective questions with section-wise scores
- An in-depth and exhaustive explanation for every question
- Reliable exam reports evaluating strengths and weaknesses
- Latest Questions with an updated version
- Tips & Tricks to crack the test
- Unlimited access
What are our Practice Exams?
- Practice exams have been designed by professionals and domain experts that simulate real time exam scenario.
- Practice exam questions have been created on the basis of content outlined in the official documentation.
- Each set in the practice exam contains unique questions built with the intent to provide real-time experience to the candidates as well as gain more confidence during exam preparation.
- Practice exams help to self-evaluate against the exam content and work towards building strength to clear the exam.
- You can also create your own practice exam based on your choice and preference
100% Assured Test Pass Guarantee
We have built the TestPrepTraining Practice exams with 100% Unconditional and assured Test Pass Guarantee!
If you are not able to clear the exam, you can ask for a 100% refund.