Free ECSS Mock Exam – Practice Online Confidently

Identify the backup mechanism that is performed within the organization using external devices such as hard

disks and requires human interaction to perform the backup operations, thus, making it suspect able to theft or

natural disasters.

Bob, a forensic investigator, is investigating a live Windows system found at a crime scene. In this process,

Bob extracted subkeys containing information such as SAM. Security, and software using an automated tool

called FTK Imager.

Which of the following Windows Registry hives' subkeys provide the above information to Bob?

Bob, a forensic investigator, was instructed to review a Windows machine and identify any anonymous

activities performed using it. In this process. Bob used the command “netstat -ano" to view all the active

connections in the system and determined that the connections established by the Tor browser were closed.

Which of the following states of the connections established by Tor indicates that the Tor browser is closed?

An investigator wants to extract information about the status of the network interface cards (NICs) in an organization's Windows-based systems. Identify the command-line utility that can help the investigator detect the network status.

Ben, a computer user, applied for a digital certificate. A component of PKI verifies Ben's identity using the credentials provided and passes that request on behalf of Ben to grant the digital certificate. Which of the following PKI components verified Ben as being legitimate to receive the certificate?