Download CFA-001 Exam Dumps Questions to get 100% Success in GAQM [Q28-Q46] : Latest Exam Prep : http://certify.vceprep.com

Q28. Which of the following log injection attacks uses white space padding to create unusual log entries?

Word wrap abuse attack

HTML injection attack

Terminal injection attack

Timestamp injection attack

Q29. Subscriber Identity Module (SIM) is a removable component that contains essential information about the subscriber. Its main function entails authenticating the user of the cell phone to the network to gain access to subscribed services. SIM contains a 20-digit long Integrated Circuit Card identification (ICCID) number, identify the issuer identifier Number from the ICCID below.

245252

001451548

Q30. Which table is used to convert huge word lists (i .e. dictionary files and brute-force lists) into password hashes?

Rainbow tables

Hash tables

Master file tables

Database tables

Q31. An Internet standard protocol (built on top of TCP/IP) that assures accurate synchronization to the millisecond of computer clock times in a network of computers. Which of the following statement is true for NTP Stratum Levels?

Stratum-0 servers are used on the network; they are not directly connected to computers which then operate as stratum-1 servers

Stratum-1 time server is linked over a network path to a reliable source of UTC time such as GPS, WWV, or CDMA transmissions

A stratum-2 server is directly linked (not over a network path) to a reliable source of UTC time such as GPS, WWV, or CDMA transmissions

A stratum-3 server gets its time over a network link, via NTP, from a stratum-2 server, and so on

Q32. The Recycle Bin exists as a metaphor for throwing files away, but it also allows user to retrieve and restore files. Once the file is moved to the recycle bin, a record is added to the log file that exists in the Recycle Bin.
Which of the following files contains records that correspond to each deleted file in the Recycle Bin?

INFO2 file

INFO1 file

LOGINFO2 file

LOGINFO1 file

Q33. BMP (Bitmap) is a standard file format for computers running the Windows operating system. BMP images can range from black and white (1 bit per pixel) up to 24 bit color (16.7 million colors). Each bitmap file contains header, the RGBQUAD array, information header, and image data. Which of the following element specifies the dimensions, compression type, and color format for the bitmap?

Header

The RGBQUAD array

Information header

Image data

Q34. What is the “Best Evidence Rule”?

It states that the court only allows the original evidence of a document, photograph, or recording at the trial rather than a copy

It contains system time, logged-on user(s), open files, network information, process information, process-to-port mapping, process memory, clipboard contents, service/driver information, and command history

It contains hidden files, slack space, swap file, index.dat files, unallocated clusters, unused partitions, hidden partitions, registry settings, and event logs

It contains information such as open network connection, user logout, programs that reside in memory, and cache data

Q35. First response to an incident may involve three different groups of people, and each will have differing skills and need to carry out differing tasks based on the incident. Who is responsible for collecting, preserving, and packaging electronic evidence?

System administrators

Local managers or other non-forensic staff

Forensic laboratory staff

Lawyers

Q36. Dumpster Diving refers to:

Searching for sensitive information in the user,s trash bins and printer trash bins, and searching the user,s desk for sticky notes

Looking at either the user,s keyboard or screen while he/she is logging in

Convincing people to reveal the confidential information

Creating a set of dictionary words and names, and trying all the possible combinations to crack the password

Q37. Hard disk data addressing is a method of allotting addresses to each ___________of data on a hard disk

Physical block

Logical block

Operating system block

Hard disk block

Q38. Which of the following statements is incorrect related to acquiring electronic evidence at crime scene?

Sample banners are used to record the system activities when used by the unauthorized user

In warning banners, organizations give clear and unequivocal notice to intruders that by signing onto the system they are expressly consenting to such monitoring

The equipment is seized which is connected to the case, knowing the role of the computer which will indicate what should be taken

At the time of seizing process, you need to shut down the computer immediately

Q39. What is static executable file analysis?

It is a process that consists of collecting information about and from an executable file without actually launching the file under any circumstances

It is a process that consists of collecting information about and from an executable file by launching the file under any circumstances

It is a process that consists of collecting information about and from an executable file without actually launching an executable file in a controlled and monitored environment

It is a process that consists of collecting information about and from an executable file by launching an executable file in a controlled and monitored environment

Q40. Which of the following statements is not a part of securing and evaluating electronic crime scene checklist?

Locate and help the victim

Transmit additional flash messages to other responding units

Request additional help at the scene if needed

Blog about the incident on the internet

Q41. Router log files provide detailed Information about the network traffic on the Internet. It gives information about the attacks to and from the networks. The router stores log files in the____________.

Router cache

Application logs

IDS logs

Audit logs

Q42. What is a SCSI (Small Computer System Interface)?

A set of ANSI standard electronic interfaces that allow personal computers to communicate with peripheral hardware such as disk drives, tape drives. CD-ROM drives, printers, and scanners

A standard electronic interface used between a computer motherboard,s data paths or bus and the computer,s disk storage devices

A “plug-and-play” interface, which allows a device to be added without an adapter card and without rebooting the computer

A point-to-point serial bi-directional interface for transmitting data between computer devices at data rates of up to 4 Gbps

Q43. An expert witness is a witness, who by virtue of education, profession, or experience, is believed to have special knowledge of his/her subject beyond that of the average person, sufficient that others legally depend upon his/her opinion.

True

False

Q44. What is the First Step required in preparing a computer for forensics investigation?

Do not turn the computer off or on, run any programs, or attempt to access data on a computer

Secure any relevant media

Suspend automated document destruction and recycling policies that may pertain to any relevant media or users at Issue

Identify the type of data you are seeking, the Information you are looking for, and the urgency level of the examination

Q45. At the time of evidence transfer, both sender and receiver need to give the information about date and time of transfer in the chain of custody record.

True

False

Q46. Which of the following Wi-Fi chalking methods refers to drawing symbols in public places to advertise open Wi-Fi networks?

WarWalking

WarFlying

WarChalking

WarDhving