Computer Hacking Forensic Investigator (CHFI) Free Practice Exam Questions

149 real Computer Hacking Forensic Investigator (CHFI) exam questions with answers and AI explanations. EC-Council certification prep — page 1 of 15.

  1. Question 1: When examining the log files from a Windows IIS Web Server, how often is a new log file created?
  2. Question 2: Which Intrusion Detection System (IDS) usually produces the most false alarms due to the unpredictable behaviors of users and networks?
  3. Question 3: What header field in the TCP/IP protocol stack involves the hacker exploit known as the Ping of Death?
  4. Question 4: If you plan to startup a suspect's computer, you must modify the ___________ to ensure that you do not contaminate or alter data on the suspect's hard drive by…
  5. Question 5: Area density refers to:
  6. Question 6: What method of computer forensics will allow you to trace all ever-established user accounts on a Windows 2000 sever the course of its lifetime?
  7. Question 7: You have completed a forensic investigation case. You would like to destroy the data contained in various disks at the forensics lab due to sensitivity of the…
  8. Question 8: Michael works for Kimball Construction Company as senior security analyst. As part of yearly security audit, Michael scans his network for vulnerabilities. Usi…
  9. Question 9: When examining a file with a Hex Editor, what space does the file header occupy?
  10. Question 10: Lance wants to place a honeypot on his network. Which of the following would be your recommendations?