QUESTION: 25

Which of the following is NOT a graphics file?

Picture3.nfo
Picture2.bmp
Picture1.tga
Picture4.psd

Answer(s): A

From the following spam mail header, identify the host IP that sent this spam?

From jie02@netvigator.com jie02@netvigator.com Tue Nov 27 17:27:11 2001
Received: from viruswall.ie.cuhk.edu.hk (viruswall [137.189.96.52]) by eng.ie.cuhk.edu.hk (8.11.6/8.11.6) with ESMTP id
fAR9RAP23061 for ; Tue, 27 Nov 2001 17:27:10 +0800 (HKT)
Received: from mydomain.com (pcd249020.netvigator.com [203.218.39.20]) by viruswall.ie.cuhk.edu.hk (8.12.1/8.12.1)

with SMTP id fAR9QXwZ018431 for ; Tue, 27 Nov 2001 17:26:36 +0800 (HKT)
Message-Id: >200111270926.fAR9QXwZ018431@viruswall.ie.cuhk.edu.hk From: "china hotel web"
To: "Shlam"
Subject: SHANGHAI (HILTON HOTEL) PACKAGE
Date: Tue, 27 Nov 2001 17:25:58 +0800 MIME-Version: 1.0
X-Priority: 3 X-MSMail- Priority: Normal
Reply-To: "china hotel web"

203.218.39.50
203.218.39.20
137.189.96.52
8.12.1.0

Answer(s): B

Reveal Solution Next Question

QUESTION: 27

You have used a newly released forensic investigation tool, which doesnt meet the Daubert Test, during a case. The case has ended-up in court. What argument could the defense make to weaken your case?

Only the local law enforcement should use the tool
You are not certified for using the tool
The tool has not been tested by the International Standards Organization (ISO)
The tool has not been reviewed and accepted by your peers

Answer(s): D

Reveal Solution Next Question

QUESTION: 28

When performing a forensics analysis, what device is used to prevent the system from recording data on an evidence disk?

a disk editor
a write-blocker
a protocol analyzer
a firewall

Answer(s): B

Reveal Solution Next Question

Free EC0-349 Exam Braindumps (page: 8)

QUESTION: 25

QUESTION: 26

QUESTION: 27

QUESTION: 28

EC0-349 Exam Discussions & Posts