452 practice questions for EC-Council Computer Hacking Forensic Investigator v11 (CHFI), exam 312-49, with full explanations.
Every question comes with the correct answer, the reasoning behind it, and a short note on why each wrong option is wrong. Work through it once with the answers, then again with the questions-only copy under exam conditions.
- 452 questions mapped to the CHFI v11 exam blueprint
- Answers and explanations for every question, including the wrong options
- A questions-only PDF for timed practice runs
- Instant delivery by email the moment you check out
- Free monthly updates for as long as the exam is live
- Pass or your money back
A 312-49 attempt costs US$650. This pack is US$39, paid once.
Try 10 questions free before you buy.
Last updated September 2026 · 452 questions
What makes the CHFI hard
CHFI v11 is the current version and it is a long exam: 150 questions over four hours, with a passing score set per exam form somewhere between 60% and 85%. The v11 update brought in dark web investigations, IoT and OT forensics, fileless malware and AI-assisted forensics, so a v9 or v10 bank leaves gaps exactly where the newest questions sit.
Digital Forensics is the biggest domain at 29%: Windows, Linux and macOS artefacts, file systems including NTFS MFT records, slack space and carving, memory forensics, network forensics, malware forensics, and cloud, mobile, IoT, OT and dark web evidence.
Digital Evidence at 18% covers acquisition, imaging, hashing, chain of custody and anti-forensics, and Procedures and Methodology at 17% is the investigation process end to end. Forensic Science, Tools, Systems and Programs, and Regulations, Policies and Ethics make up the rest. The questions are scenario heavy, so knowing which artefact answers which question matters more than memorising tool menus.
About the exam
312-49 v11 (Computer Hacking Forensic Investigator) earns the EC-Council CHFI certification. It covers forensic science, regulations and ethics, digital evidence, investigation procedures and methodology, digital forensics across operating systems, networks, malware, cloud, mobile, IoT and OT, and forensic tools. There are no prerequisites with official training; self-study candidates need two years of information security experience and an eligibility application.
Exam domains
- Forensic Science: 15%
- Regulations, Policies, and Ethics: 10%
- Digital Evidence: 18%
- Procedures and Methodology: 17%
- Digital Forensics: 29%
- Tools, Systems, and Programs: 11%
150 multiple choice questions, 240 minutes, passing score 60% to 85% depending on the exam form, US$650 per attempt, ECC Exam Center, Pearson VUE or remote proctoring, certification valid for three years with EC-Council continuing education.
Reviews
There are no reviews yet.