Eccouncil 312-49 Exam - Topic 1 Question 63 Discussion

Actual exam question for Eccouncil's 312-49 exam

Question #: 63
Topic #: 1

[All 312-49 Questions]

When should an MD5 hash check be performed when processing evidence?

AAfter the evidence examination has been completed

BOn an hourly basis during the evidence examination

CBefore and after evidence examination

DBefore the evidence examination has been completed

Show Suggested Answer

Suggested Answer: D

by Casey at Aug 07, 2024, 11:33 PM

Limited Time Offer

25%

Off

Get Premium 312-49 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Artie

3 months ago

Option B seems excessive, hourly checks? Really?

upvoted 0 times

...

Denae

3 months ago

I thought it was just before the examination, not after too.

upvoted 0 times

...

Tiara

3 months ago

Wait, can you really trust MD5 anymore?

upvoted 0 times

...

Lore

4 months ago

Totally agree, option C is the way to go!

upvoted 0 times

...

Santos

4 months ago

MD5 checks should be done before and after the examination.

upvoted 0 times

...

Lynda

4 months ago

I thought we only needed to check it after the examination, but now I'm questioning if we should do it before as well. This is tricky!

upvoted 0 times

...

Edna

4 months ago

I feel like checking the hash hourly seems excessive, but I can't recall if there are specific guidelines about that.

upvoted 0 times

...

Rashida

4 months ago

I remember practicing a question similar to this, and I think the MD5 hash check is crucial at both ends of the process. So, maybe it's option C?

upvoted 0 times

...

Alberto

5 months ago

I think we should check the MD5 hash before and after the examination to ensure integrity, but I'm not entirely sure if that's the only time it should be done.

upvoted 0 times

...

Tabetha

5 months ago

I feel pretty confident that the correct answer is to perform the hash check before and after the evidence examination, to ensure the data's integrity throughout the process.

upvoted 0 times

...

Nieves

5 months ago

Based on my understanding, the hash check should be done before the evidence examination is completed, to verify the data hasn't been tampered with during the process.

upvoted 0 times

...

Jackie

5 months ago

Hmm, I'm a bit confused on the timing of the hash check. I'll need to review my notes to see if I can figure out the right approach.

upvoted 0 times

...

Adelaide

5 months ago

This is a tricky one. I'll need to think carefully about the best time to perform the MD5 hash check.

upvoted 0 times

...

Dusti

5 months ago

I'm not totally sure about this, but I think it might be best to do the hash check before and after the evidence examination to ensure the integrity of the data.

upvoted 0 times

...

Rosalind

5 months ago

Ah, this is a good one! I remember discussing data models for risk analysis in class. I think the key is to identify the main focus and metrics being tracked on the dashboard.

upvoted 0 times

...

In

5 months ago

Hmm, I'm not too familiar with iBMC and its remote management capabilities. I'll need to think this through carefully and review my notes to make sure I select the right functions.

upvoted 0 times

...

Alexia

9 months ago

Hourly hash checks? What is this, a fitness tracker for evidence? Let's not make this more complicated than it needs to be.

upvoted 0 times

Herschel

8 months ago

D) Before the evidence examination has been completed

upvoted 0 times

...

Annice

8 months ago

Hourly hash checks seem excessive. Let's stick to before and after.

upvoted 0 times

...

Valentin

8 months ago

C) Before and after evidence examination

upvoted 0 times

...

Dean

8 months ago

A) After the evidence examination has been completed

upvoted 0 times

...

Clare

10 months ago

A) After the evidence examination has been completed? Wouldn't that defeat the whole purpose of the hash check? I'm not sure I'm following the logic there.

upvoted 0 times