Question 1

Watson, a forensic investigator, is examining a copy of an ISO file stored in CDFS format. What type of evidence is this?

Options :

A : Data from a CD copied using Windows

B : Data from a CD copied using Mac-based system

C : Data from a DVD copied using Windows system

D : Data from a CD copied using Linux system

Answer: A

Question 2

What will the following URL produce in an unpatched IIS Web Server?

http://www.thetargetsite.com/scripts/..%

co?../..%co?../windows/system32/cmd.exe?/c+dir+c:\

Options :

A : Directory listing of C: drive on the web server

B : Insert a Trojan horse into the C: drive of the web server

C : Execute a buffer flow in the C: drive of the web server

D : Directory listing of the C:\windows\system32 folder on the web server

Answer: A

Question 3

What technique is used by JPEGs for compression?

Options :

A : TIFF-8

B : ZIP

C : DCT

D : TCD

Answer: C

Question 4

Which password cracking technique uses every possible combination of character sets?

Options :

A : Rainbow table attack

B : Brute force attack

C : Rule-based attack

D : Dictionary attack

Answer: B

Question 5

Billy, a computer forensics expert, has recovered a large number of DBX files during the forensic investigation of a laptop. Which of the following email clients can he use to analyze the DBX files?

Options :

A : Microsoft Outlook

B : Eudora

C : Mozilla Thunderbird

D : Microsoft Outlook ExpressG

Answer: D

Free 312-49 Mock Exam – Practice Online Confidently

Buying Options: