Free Cram & Latest Exams Dumps

QUESTION 33
What value of the “Boot Record Signature” is used to indicate that the boot-loader exists?

QUESTION 34
Which of the following statements pertaining to First Response is true?

QUESTION 35
You are assisting in the investigation of a possible Web Server Hack. The company who called you stated that customers reported to them that whenever they entered the web address of the company in their browser, what they received was a porno graphic web site. The company checked the web server and nothing appears wrong. When you type in the IP address of the web site in your browser everything appears normal. What is the name of the attack that affects the DNS cache of the name resolution servers, resulting in those servers directing users to the wrong web site?

QUESTION 36
Lance wants to place a honeypot on his network. Which of the following would be your recommendations?

QUESTION 37
Which set of anti-forensic tools/techniques allows a program to compress and/or encrypt an executable file to hide attack tools from being detected by reverse-engineering or scanning?

QUESTION 38
Office Documents (Word, Excel and PowerPoint) contain a code that allows tracking the MAC or unique identifier of the machine that created the document. What is that code called?

QUESTION 39
Which of the following files gives information about the client sync sessions in Google Drive on Windows?

QUESTION 40
What does the superblock in Linux define?

QUESTION 41
Brian needs to acquire data from RAID storage. Which of the following acquisition methods is recommended to retrieve only the data relevant to the investigation?

QUESTION 42
Chris has been called upon to investigate a hacking incident reported by one of his clients. The company suspects the involvement of an insider accomplice in the attack. Upon reaching the incident scene, Chris secures the physical area, records the scene using visual medi a. He shuts the system down by pulling the power plug so that he does not disturb the system in any way. He labels all cables and connectors prior to disconnecting any. What do you think would be the next sequence of events?

QUESTION 43
Which of the following processes is part of the dynamic malware analysis?

QUESTION 44
What does 254 represent in ICCID 89254021520014515744?

QUESTION 45
Larry is an IT consultant who works for corporations and government agencies. Larry plans on shutting down the city’s network using BGP devices and zombies? What type of Penetration Testing is Larry planning to carry out?

QUESTION 46
Which of the following ISO standard defines file systems and protocol for exchanging data between optical disks?

QUESTION 47
Amber, a black hat hacker, has embedded malware into a small enticing advertisement and posted it on a popular ad-network that displays across various websites. What is she doing?

QUESTION 48
Which of the following standard represents a legal precedent regarding the admissibility of scientific examinations or experiments in legal cases?

QUESTION 49
______allows a forensic investigator to identify the missing links during investigation.

QUESTION 50
Which password cracking technique uses details such as length of password, character sets used to construct the password, etc.?

QUESTION 51
Which of the following file contains the traces of the applications installed, run, or uninstalled from a system?

QUESTION 52
How often must a company keep log files for them to be admissible in a court of law?

QUESTION 53
Frank, a cloud administrator in his company, needs to take backup of the OS disks of two Azure VMs that store business-critical dat a. Which type of Azure blob storage can he use for this purpose?