Eccouncil Exam 312-49 Topic 1 Question 63 Discussion

Actual exam question for Eccouncil's 312-49 exam

Question #: 63
Topic #: 1

[All 312-49 Questions]

When should an MD5 hash check be performed when processing evidence?

AAfter the evidence examination has been completed

BOn an hourly basis during the evidence examination

CBefore and after evidence examination

DBefore the evidence examination has been completed

Show Suggested Answer

Suggested Answer: D

by Casey at Aug 07, 2024, 11:33 PM

Limited Time Offer

25%

Off

Get Premium 312-49 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alexia

26 days ago

Hourly hash checks? What is this, a fitness tracker for evidence? Let's not make this more complicated than it needs to be.

upvoted 0 times

...

Clare

2 months ago

A) After the evidence examination has been completed? Wouldn't that defeat the whole purpose of the hash check? I'm not sure I'm following the logic there.

upvoted 0 times

Herminia

11 days ago

C) I agree, performing the hash check before and after the examination is the best practice to maintain the integrity of the evidence.

upvoted 0 times

...

Rosamond

18 days ago

B) I think it's important to perform the MD5 hash check before the evidence examination has been completed to catch any tampering early on.

upvoted 0 times

...

Annelle

1 months ago

A) Before and after evidence examination. That way you can ensure the integrity of the evidence throughout the process.

upvoted 0 times

...

Dortha

2 months ago

B) On an hourly basis during the evidence examination? Really? Who has time for that? Let's keep it simple, folks.

upvoted 0 times

Olen

7 days ago

D) Before the evidence examination has been completed

upvoted 0 times

...

Joni

9 days ago

B) On an hourly basis during the evidence examination? That seems excessive.

upvoted 0 times

...

Fatima

25 days ago

C) Before and after evidence examination

upvoted 0 times

...

Emogene

1 months ago

A) After the evidence examination has been completed

upvoted 0 times

...

Marguerita

2 months ago

I believe it should be done after the evidence examination has been completed to verify everything is still intact.

upvoted 0 times

...

Fletcher

2 months ago

I agree with Cheryll. Performing the check before and after ensures the integrity of the evidence.

upvoted 0 times

...

Leonor

2 months ago

D) Before the evidence examination has been completed. Gotta make sure the data is legit before you start digging in, am I right?

upvoted 0 times

Gracia

14 days ago

Yes, it's important to verify the integrity of the data before diving into the examination.

upvoted 0 times

...

Hannah

1 months ago

D) Before the evidence examination has been completed

upvoted 0 times

...

Penney

1 months ago

C) Before and after evidence examination

upvoted 0 times

...

Evette

1 months ago

A) After the evidence examination has been completed

upvoted 0 times

...

Brandon

2 months ago

C) Before and after evidence examination seems like the obvious choice to ensure the integrity of the evidence throughout the process.

upvoted 0 times

...

Cheryll

2 months ago

I think an MD5 hash check should be performed before and after evidence examination.

upvoted 0 times

...