QUESTION: 109

______________is simply the application of Computer Investigation and analysis techniques in the interests of determining potential legal evidence.

Network Forensics
Computer Forensics
Incident Response
Event Reaction

Answer(s): B

Reveal Solution Next Question

QUESTION: 110

What is the name of the Standard Linux Command that is also available as windows application that can be used to create bit-stream images?

mcopy
image
MD5
dd

Answer(s): D

Reveal Solution Next Question

QUESTION: 111

To preserve digital evidence, an investigator should ________________ .

Make two copies of each evidence item using a single imaging tool
Make a single copy of each evidence item using an approved imaging tool
Make two copies of each evidence item using different imaging tools
Only store the original evidence item

Answer(s): C

Reveal Solution Next Question

Profiling is a forensics technique for analyzing evidence with the goal of identifying the perpetrator from their various activity. After a computer has been compromised by a hacker, which of the following would be most important in forming a profile of the incident?

The manufacturer of the system compromised
The logic, formatting and elegance of the code used in the attack
The nature of the attack
The vulnerability exploited in the incident

Answer(s): B

Reveal Solution Next Question

Free 312-49 Exam Braindumps (page: 29)

QUESTION: 109

QUESTION: 110

QUESTION: 111

QUESTION: 112

312-49 Discussions & Posts