ECCouncil 312-49 : Computer Hacking Forensic Investigator (CHFI) Exam
The ECCouncil 312-49 Computer Hacking Forensic Investigator exam is a 4-hour exam with 150 multiple choice questions. It is required for the Computer Hacking Forensic Investigator V4 certification and will test knowledge of computer and operation system forensics and investigation techniques related to, attacks, infringement, etc.
The ECCouncil 312-49 exam is available through Prometric and can be taken at VUE testing centers worldwide. Four training courses (including online and classroom versions) are available to take, while other resources can be accessed online at the ECCouncil website. The exam is only available in English. A passing score of 70% is required.
Several areas of knowledge will be tested. Participants must be able to describe the computer forensics investigation process in detail, including aspects like digital evidence, incident handling, stenography, and media devices. Participants should know the processes of operation system forensics, including Windows, Mac, and Linux, and investigations using AccessData FTK and Encase. Participants will be asked to investigate such things as Internet crimes, web/wireless attacks, copyright infringement, and child pornography incidents, and understand different types of forensics (cell phone, iPod, PDA, etc.).
Reference: official ECCouncil 312-49 exam description