How Many Questions Of 312-49v9 Answers

NEW QUESTION 1

How do you define forensic computing?

• A. It is the science of capturing, processing, and investigating data security incidents and making it acceptable to a court of law.
• B. It is a methodology of guidelines that deals with the process of cyber investigation
• C. It Is a preliminary and mandatory course necessary to pursue and understand fundamental principles of ethical hacking
• D. It is the administrative and legal proceeding in the process of forensic investigation

Answer: A

NEW QUESTION 2

Paul's company is in the process of undergoing a complete security audit including logical and physical security testing. After all logical tests were performed; it is now time for the physical round to begin. None of the employees are made aware of this round of testing. The security-auditing firm sends in a technician dressed as an electrician. He waits outside in the lobby for some employees to get to work and follows behind them when they access the restricted areas. After entering the main office, he is able to get into the server room telling the IT manager that there is a problem with the outlets in that room. What type of attack has the technician performed?

• A. Fuzzing
• B. Tailgating
• C. Backtrapping
• D. Man trap attack

Answer: C

NEW QUESTION 3

You are working on a thesis for your doctorate degree in Computer Science. Your thesis is based on HTML, DHTML, and other web-based languages and how they have evolved over the years. You navigate to archive. org and view the HTML code of news.com. You then navigate to the current news.com website and copy over the source code. While searching through the code, you come across something abnormal: What have you found?

• A. Web bug
• B. CGI code
• C. Trojan.downloader
• D. Blind bug

Answer: A

NEW QUESTION 4

Travis, a computer forensics investigator, is finishing up a case he has been working on for over a month involving copyright infringement and embezzlement. His last task is to prepare an investigative report for the president of the company he has been working for. Travis must submit a hard copy and an electronic copy to this president. In what electronic format should Travis send this report?

• A. TIFF-8
• B. DOC
• C. WPD
• D. PDF

Answer: D

NEW QUESTION 5

John is working as a computer forensics investigator for a consulting firm in Canada. He is called to seize a computer at a local web caf?John is working as a computer forensics investigator for a consulting firm in Canada. He is called to seize a computer at a local web caf purportedly used as a botnet server. John thoroughly scans the computer and finds
nothing that would lead him to think the computer was a botnet server. John decides to scan the virtual memory of the computer to possibly find something he had missed. What information will the virtual memory scan produce?

• A. It contains the times and dates of when the system was last patched
• B. It is not necessary to scan the virtual memory of a computer
• C. It contains the times and dates of all the system files
• D. Hidden running processes

Answer: D

NEW QUESTION 6

Click on the Exhibit Button Paulette works for an IT security consulting company that is currently performing an audit for the firm ACE Unlimited. Paulette's duties include logging on to all the company's network equipment to ensure IOS versions are up-to-date and all the other security settings are as stringent as possible. Paulette presents the following screenshot to her boss so he can inform the client about necessary changes need to be made. From the screenshot, what changes should the client company make?

• A. The banner should include the Cisco tech support contact information as well
• B. The banner should have more detail on the version numbers for the networkeQuipment
• C. The banner should not state "only authorized IT personnel may proceed"
• D. Remove any identifying numbers, names, or version information

Answer: D

NEW QUESTION 7

What term is used to describe a cryptographic technique for embedding information into something else for the sole
purpose of hiding that information from the casual observer?

• A. Key escrow
• B. Steganography
• C. Rootkit
• D. Offset

Answer: B

NEW QUESTION 8

Network forensics can be defined as the sniffing, recording, acquisition and analysis of the network traffic and event logs in order to investigate a network security incident.

• A. True
• B. False

Answer: A

NEW QUESTION 9

Log management includes all the processes and techniques used to collect, aggregate, and analyze computer-generated log messages. It consists of the hardware, software, network and media used to generate, transmit, store, analyze, and dispose of log data.

• A. True
• B. False

Answer: A

NEW QUESTION 10

Volatile Memory is one of the leading problems for forensics. Worms such as code Red are memory resident and do not write themselves to the hard drive, if you turn the system off they disappear. In a lab environment, which of the following options would you suggest as the most appropriate to overcome the problem of capturing volatile memory?

• A. Use Vmware to be able to capture the data in memory and examine it
• B. Give the Operating System a minimal amount of memory, forcing it to use a swap file
• C. Create a Separate partition of several hundred megabytes and place the swap file there
• D. Use intrusion forensic techniques to study memory resident infections

Answer: AC

NEW QUESTION 11

During the course of an investigation, you locate evidence that may prove the innocence of the suspect of the investigation. You must maintain an unbiased opinion and be objective in your entire fact finding process. Therefore you report this evidence. This type of evidence is known as:

• A. Inculpatory evidence
• B. mandatory evidence
• C. exculpatory evidence
• D. Terrible evidence

Answer: C

NEW QUESTION 12

A rogue/unauthorized access point is one that Is not authorized for operation by a particular firm or network

• A. True
• B. False

Answer: A

NEW QUESTION 13

Which of the following reports are delivered under oath to a board of directors/managers/panel of jury?

• A. Written informal Report
• B. Verbal Formal Report
• C. Written Formal Report
• D. Verbal Informal Report

Answer: B

NEW QUESTION 14

Event correlation is a procedure that is assigned with a new meaning for a set of events that occur in a predefined interval of time.
Which type of correlation will you use if your organization wants to use different OS and network hardware platforms throughout the network?

• A. Same-platform correlation
• B. Cross-platform correlation
• C. Multiple-platform correlation
• D. Network-platform correlation

Answer: B

NEW QUESTION 15

Julie is a college student majoring in Information Systems and Computer Science. She is currently writing an essay for her computer crimes class. Julie paper focuses on white-collar crimes in America and how forensics investigators investigate the cases. Julie would like to focus the subjectJulie? paper focuses on white-collar crimes in America and how forensics investigators investigate the cases. Julie would like to focus the subject of the essay on the most common type of crime found in corporate America. What crime should Julie focus on?

• A. Physical theft
• B. Copyright infringement
• C. Industrial espionage
• D. Denial of Service attacks

Answer: C

NEW QUESTION 16

Computer forensics report provides detailed information on complete computer forensics investigation process. It should explain how the incident occurred, provide technical details of the incident and should be clear to understand. Which of the following attributes of a forensics report can render it inadmissible in a court of law?

• A. It includes metadata about the incident
• B. It includes relevant extracts referred to In the report that support analysis or conclusions
• C. It is based on logical assumptions about the incident timeline
• D. It maintains a single document style throughout the text

Answer: C

NEW QUESTION 17

TCP/IP (Transmission Control Protocol/Internet Protocol) is a communication protocol used to connect different hosts in the Internet. It contains four layers, namely the network interface layer. Internet layer, transport layer, and application layer.
Which of the following protocols works under the transport layer of TCP/IP?

• A. UDP
• B. HTTP
• C. FTP
• D. SNMP

Answer: A

NEW QUESTION 18

What is the First Step required in preparing a computer for forensics investigation?

• A. Do not turn the computer off or on, run any programs, or attempt to access data on a computer
• B. Secure any relevant media
• C. Suspend automated document destruction and recycling policies that may pertain to any relevant media or users at Issue
• D. Identify the type of data you are seeking, the Information you are looking for, and the urgency level of the examination

Answer: A

NEW QUESTION 19

Computer security logs contain information about the events occurring within an organization's systems and networks. Application and Web server log files are useful in detecting web attacks. The source, nature, and time of the attack can be determined by ____ of the compromised system.

• A. Analyzing log files
• B. Analyzing SAM file
• C. Analyzing rainbow tables
• D. Analyzing hard disk boot records

Answer: A

NEW QUESTION 20

A(n) ____ is one that’s performed by a computer program rather than the attacker manually performing the steps in the attack sequence.

• A. blackout attack
• B. automated attack
• C. distributed attack
• D. central processing attack

Answer: B

NEW QUESTION 21

What is a first sector ("sector zero") of a hard disk?

• A. Master boot record
• B. System boot record
• C. Secondary boot record
• D. Hard disk boot record

Answer: A

NEW QUESTION 22

The use of warning banners helps a company avoid litigation by overcoming an employees assumed when connecting to the company intranet, network, or virtual private network (VPN) and will allow the company investigators to monitor, search, and retrievecompany? intranet, network, or virtual private network (VPN) and will allow the company? investigators to monitor, search, and retrieve information stored within the network.

• A. Right to work
• B. Right of free speech
• C. Right to Internet access
• D. Right of privacy

Answer: D

NEW QUESTION 23

The efforts to obtain information before a trial by demanding documents, depositions, questions and answers written under oath, written requests for admissions of fact, and examination of the scene is a description of what legal term?

• A. Detection
• B. Hearsay
• C. Spoliation
• D. Discovery

Answer: D

NEW QUESTION 24

What is the first step taken in an investigation for laboratory forensic staff members?

• A. Packaging the electronic evidence
• B. Securing and evaluating the electronic crime scene
• C. Conducting preliminary interviews
• D. Transporting the electronic evidence

Answer: B

NEW QUESTION 25

To preserve digital evidence, an investigator should _____

• A. Make two copies of each evidence item using a single imaging tool
• B. Make a single copy of each evidence item using an approved imaging tool
• C. Make two copies of each evidence item using different imaging tools
• D. Only store the original evidence item

Answer: C

NEW QUESTION 26

The MD5 program is used to:

• A. wipe magnetic media before recycling it
• B. make directories on a evidence disk
• C. view graphics files on an evidence drive
• D. verify that a disk is not altered when you examine it

Answer: D

NEW QUESTION 27
......