Identification of Malicious System and User Activity
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Which of the following file systems is used by both CDs and DVDs?
ANetwork File System (NFS)
BNew Technology File System (NTFS)
CCompact Disk File System (CDFS)
DUniversal Disk Format (UDF)
In the United States, Title VII of the Civil Rights Act of 1964 was created to protect employees from discrimination based on religion, color, race, national origin, and sex. This law makes employment discrimination illegal. What was the Act’s original emphasis?
AProtect fundamental rights of an employee
BEqual position to all employees
CProtect woman in the workplace
DPrevent child pornography
Which XNU (OS X kernel) module provides the primary system-program interface?
ABSD
BLIBKERN
CI/O Toolkit
DMach
When you start your computer, the Windows operating system reports that the hard disk drive contains bad sectors. What should be your first step to resolve this issue?
ARun the FORMAT command from DOS prompt.
BReplace the data cable of the hard disk drive.
CRun DEFRAG on the hard drive.
DRun SCANDISK with the Thorough option.
Peter is a Computer Hacking Forensic Investigator at SecureEnet Inc. He has been assigned to investigate a disloyal employee accused of stealing the company’s secret data and selling it to a competitor company. Peter must collect appropriate evidence and information to present to the court for prosecution.
Which of the following parameters is necessary for the successful prosecution of this corporate espionage?
ATo prove that the information has a value.
BTo present the evidences before the court.
CTo submit investigative report to senior officials.
DTo prove that the data belongs to the company.
You work as a professional Computer Hacking Forensic Investigator. You have been assigned a project to investigate plagiarism that occurred in C# source-code files. Which of the following tools would you use to detect software plagiarism?
AJplag
BTurnitin
CVAST
DSCAM
Which of the following tools blocks email, Instant Message, Web site, or other media when inappropriate words, such as pornography or violence, are used?
AiProtect
BReveal
CiProtectYou
DChild Exploitation Tracking System
Which of the following Windows Registry keys contains the user’s password file?
AHKEY_USER
BHKEY_CURRENT_CONFIG
CHKEY_DYN_DATA
DHKEY_LOCAL_MACHINE
Which of the following precautionary actions are taken by supervisors or employers to prevent sexual harassment in the workplace?
Each correct answer represents a complete solution. Choose all that apply.
Choose three
AEstablish a complaint mechanism.
BCommunicate to an employee who is indulging in such behavior.
CContact the police and take legal action.
DImmediately take action on the complaint.
Trinity wants to email her friend. To help ensure the email’s security and integrity, she uses an MD5 generator to calculate its cryptographic hash. The MD5 generator Trinity uses operates in two steps:
Creates a check file
Verifies the check file
Which of the following MD5 generators is Trinity using?
AMD5 Checksum Verifier
BMat-MD5
CChaos MD5
DSecure Hash Signature Generator
Which command is used to create or delete partitions in Windows XP?
APart
BDISKPART
Cfdisk
DActive
John is a Technical Support Executive at ABC Inc. The company network has ten computers, all running Windows XP Professional. John is using a computer on which he has enabled hibernation. He shuts down the computer by using hibernation mode. What happens to the data after the system is powered off through hibernation?
AData will be saved automatically before the system is switched off.
BData will be stored on the ROM.
CData will be saved before the system is switched off if you have configured hibernation to save data.
DUnsaved data will be lost when hibernation switches off the system.
Which of the following are referred to as the three laws of OPSEC?
Each correct answer represents part of the solution.
Choose three
AIf you are not protecting it (the critical and sensitive information), the adversary wins!
BIf you don't know the threat, how do you know what to protect?
CIf you don't know what to protect, how do you know you are protecting it?
DIf you don't know about your security resources you cannot protect your network.
Adam is a professional Computer Hacking Forensic Investigator. The chief security officer of a cloth manufacturing company assigns him a project after suspecting that an employee is selling the company’s clothing designs outside the organization. The security officer asks Adam to investigate the employee’s iPhone because sensitive information might be stored on it.
During the investigation, Adam discovers that the employee is attempting to destroy evidence on the iPhone. The employee presses and holds the Home and Power buttons until the device is forced into recovery mode. Which of the following occurs when an iPhone is placed into recovery mode?
AiPhone will be prevented from booting temporarily.
BThe file system will be destroyed.
CNothing will happen.
DData will be destroyed.
You are a Web developer at ABC Inc. and need to investigate a Cross-Site Scripting attack against your company’s Web site. Which of the following investigation methods can you use to accomplish this task?
Each correct answer represents a complete solution. Choose all that apply.
Choose four
AReview the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL to the company's site.
BLook at the Web server's logs and normal traffic logging.
CUse Wireshark to capture traffic going to the server and then searching for the requests going to the input page, which may give log of the malicious traffic and the IP address of the source.
DUse a Web proxy to view the Web server transactions in real time and investigate any communication with outside servers.
Which of the following refers to the process of overwriting every addressable location on a disk?
ADrive wiping
BSpoofing
CSanitization
DAuthentication
Which of the following standard technologies is not used to interface a hard disk with a computer?
AUSB
BSCSI
CIDE/ATA
DPS/2
Adam, a malicious hacker, conceals a hacking tool from his company’s system administrator by using the Alternate Data Streams (ADS) feature. Which statement is true in the context of this scenario?
AAlternate Data Streams is a feature of Linux operating system.
BAdam is using FAT file system.
CAdam is using NTFS file system.
DAdam's system runs on Microsoft Windows 98 operating system.
Adam is a professional Computer Hacking Forensic Investigator. The FBI has called him to examine data from a hard disk seized at the home of a suspected terrorist. Adam decides to acquire an image of the suspect hard drive. He uses a forensic hardware tool capable of capturing data from IDE, Serial ATA, SCSI devices, and flash cards. The tool can also generate MD5 and CRC32 hashes while it captures the data. Which of the following tools is Adam using?
AWipe MASSter
BImageMASSter 4002i
CImageMASSter Solo-3
DFireWire DriveDock
TCP FIN scanning is a stealth-scanning technique in which an attacker sends a FIN packet to a target port. If the port is closed, the victim presumes the packet was sent accidentally and returns an RST packet to the attacker. If the port is open, it ignores and drops the FIN packet. Which operating system can be readily identified using TCP FIN scanning?
Community Discussion