QUESTION: 113 Topic 3, Volume C

Paula works as the primary help desk contact for her company.Paula has just received a call from a user reporting that his computer just displayed a Blue Screen of Death screen and he can no longer work.Paula walks over to the users computer and sees the Blue Screen of Death screen.The users computer is running Windows XP, but the Blue Screen looks like a familiar one that Paula had seen on Windows 2000 computers periodically. The user said he stepped away from his computer for only 15 minutes and when he got back, the Blue Screen was there.Paula also noticed that the hard drive activity light was flashing, meaning that the computer was processing something.Paula knew this should not be the case since the computer should be completely frozen during a Blue Screen. She checks the network IDS live log entries and notices numerous nmap scan alerts.
What is Paula seeing happen on this computer?

Paulas network was scanned using Floppyscan
There was IRQ conflict in Paulas PC
Paulas network was scanned using Dumpsec
Tools like Nessus will cause BSOD

Answer(s): A

Reveal Solution Next Question

QUESTION: 114 Topic 3, Volume C

What is the advantage in encrypting the communication between the agent and the monitor in an Intrusion Detection System?

Encryption of agent communications will conceal the presence of the agents
Alerts are sent to the monitor when a potential intrusion is detected
An intruder could intercept and delete data or alerts and the intrusion can go undetected
The monitor will know if counterfeit messages are being generated because they will not be encrypted

Answer(s): D

Reveal Solution Next Question

QUESTION: 115 Topic 3, Volume C

Which legal document allows law enforcement to search an office, place of business, or other locale for evidence relating to an alleged crime?

bench warrant
wire tap
subpoena
search warrant

Answer(s): D

Reveal Solution Next Question

QUESTION: 116 Topic 3, Volume C

You are working as an investigator for a corporation and you have just received instructions from your manager to assist in the collection of 15 hard drives that are part of an ongoing investigation.
Your job is to complete the required evidence custody forms to properly document each piece of evidence as it is collected by other members of your team. Your manager instructs you to complete one multi-evidence form for the entire case and a single-evidence form for each hard drive. How will these forms be stored to help preserve the chain of custody of the case?

All forms should be placed in an approved secure container because they are now primary evidence in the case.
The multi-evidence form should be placed in the report file and the single-evidence forms should be kept with each hard drive in an approved secure container.
The multi-evidence form should be placed in an approved secure container with the hard drives and the single-evidence forms should be placed in the report file.
All forms should be placed in the report file because they are now primary evidence in the case.

Answer(s): B

Reveal Solution Next Question

Free 412-79 Exam Braindumps (page: 29)

QUESTION: 113 Topic 3, Volume C

QUESTION: 114 Topic 3, Volume C

QUESTION: 115 Topic 3, Volume C

QUESTION: 116 Topic 3, Volume C