nerdexam
EC-Council

312-49 · Question #291

Which forensic investigating concept trails the whole incident from how the attack began to how the victim was affected?

The correct answer is B. End-to-end. The end-to-end forensic concept refers to tracing an attack across its entire lifecycle - from the initial attack vector and compromise, through lateral movement and exploitation, all the way to the final impact on the victim. It provides a complete narrative of the intrusion…

Submitted by priya_blr· Apr 18, 2026Computer Forensics Investigation Process

Question

Which forensic investigating concept trails the whole incident from how the attack began to how the victim was affected?

Options

  • APoint-to-point
  • BEnd-to-end
  • CThorough
  • DComplete event analysis

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    89% (34)
  • C
    5% (2)
  • D
    3% (1)

Explanation

The end-to-end forensic concept refers to tracing an attack across its entire lifecycle - from the initial attack vector and compromise, through lateral movement and exploitation, all the way to the final impact on the victim. It provides a complete narrative of the intrusion without gaps, connecting cause to effect. This is critical for understanding attacker intent, reconstructing the timeline, and identifying every affected system. 'Point-to-point' would only describe individual hops or connections, not the full chain. 'Complete event analysis' and 'thorough' are generic descriptors, not established forensic methodology terms. End-to-end is the recognized term for holistic, full-chain incident reconstruction.

Topics

#Forensic investigation concepts#Incident scope#Investigation methodology#Forensic terminology

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice