Latest Exam Prep

NO.249 An investigator has acquired packed software and needed to analyze it for the presence of malice. Which of the following tools can help in finding the packaging software used?

NO.250 Hard disk data addressing is a method of allotting addresses to each _______ of data on a hard disk.

NO.251 Printing under a Windows Computer normally requires which one of the following files types to be created?

NO.252 When performing a forensics analysis, what device is used to prevent the system from recording data on an evidence disk?

NO.253 Who is responsible for the following tasks?
Secure the scene and ensure that is maintained in a secure state until the Forensic Team advises Make notes about the scene that will eventually be handed over to the Forensic Team

NO.254 When analyzing logs, it is important that the clocks of all the network devices are synchronized. Which protocol will help in synchronizing these clocks?

NO.255 Sectors in hard disks typically contain how many bytes?

NO.256 Which forensic investigating concept trails the whole incident from how the attack began to how the victim was affected?

NO.257 Ivanovich, a forensics investigator, is trying to extract complete information about running processes from a system. Where should he look apart from the RAM and virtual memory?

NO.258 Using Internet logging software to investigate a case of malicious use of computers, the investigator comes across some entries that appear odd.

From the log, the investigator can see where the person in question went on the Internet. From the log, it appears that the user was manually typing in different user ID numbers. What technique this user was trying?

NO.259 What will the following command accomplish?
dd if=/dev/xxx of=mbr.backup bs=512 count=1

NO.260 Chris has been called upon to investigate a hacking incident reported by one of his clients.
The company suspects the involvement of an insider accomplice in the attack. Upon reaching the incident scene, Chris secures the physical area, records the scene using visual media. He shuts the system down by pulling the power plug so that he does not disturb the system in any way. He labels all cables and connectors prior to disconnecting any. What do you think would be the next sequence of events?

NO.261 Lance wants to place a honeypot on his network. Which of the following would be your recommendations?

NO.262 What is the investigator trying to analyze if the system gives the following image as output?

NO.263 Korey, a data mining specialist in a knowledge processing firm DataHub.com, reported his CISO that he has lost certain sensitive data stored on his laptop. The CISO wants his forensics investigation team to find if the data loss was accident or intentional. In which of the following category this case will fall?