Question 1

During an investigation of an XSS attack, the investigator comes across the term “[a-zA-Z0-9\%]+” in

analyzed evidence details. What is the expression used for?

Options :

A :

Checks for upper and lower-case alphanumeric string inside the tag, or its hex representation

B :

Checks for forward slash used in HTML closing tags, its hex or double-encoded hex equivalent

C :

Checks for opening angle bracket, its hex or double-encoded hex equivalent

D :

Checks for closing angle bracket, hex or double-encoded hex equivalent

Answer: B

Question 2

When needing to search for a website that is no longer present on the Internet today but was online few years back, what site can be used to view the website collection of pages?

Options :

A : Proxify.net

B : Dnsstuff.com

C : Samspade.org

D : Archive.org

Answer: D

Question 3

Which of the following is an iOS Jailbreaking tool?

Options :

A :

Kingo Android ROOT

B :

Towelroot

C :

One Click Root

D : Redsn0w

Answer: D

Question 4

Billy, a computer forensics expert, has recovered a large number of DBX files during the forensic investigation of a laptop. Which of the following email clients can he use to analyze the DBX files?

Options :

A : Microsoft Outlook

B : Eudora

C : Mozilla Thunderbird

D : Microsoft Outlook ExpressG

Answer: D

Question 5

SO/IEC 17025 is an accreditation for which of the following:

Options :

A : CHFI issuing agency

B : Encryption

C : Forensics lab licensing

D : Chain of custody

Answer: C

Free 312-49 Mock Exam – Practice Online Confidently

Buying Options: