EC-Council
312-49V9 · Question #185
312-49V9 Question #185: Real Exam Question with Answer & Explanation
Sign in or unlock 312-49V9 to reveal the answer and full explanation for question #185. The question stem and answer options stay visible for context.
Question
You have been asked to investigate the possibility of computer fraud in the finance department of a company. It is suspected that a staff member has been committing finance fraud by printing cheques that have not been authorized. You have exhaustively searched all data files on a bitmap image of the target computer, but have found no evidence. You suspect the files may not have been saved. What should you examine next in this case?
Options
- AThe registry
- BThe swapfile
- CThe recycle bin
- DThe metadata
Unlock 312-49V9 to see the answer
You've previewed enough free 312-49V9 questions. Unlock 312-49V9 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.