Free CFA-001 Exam Braindumps
Certified Forensic Analyst Questions 56–60 (page: 13)

Updated On: 9-Feb-2026

P0P3 (Post Office Protocol 3) is a standard protocol for receiving email that deletes mail on the server as soon as the user downloads it.
When a message arrives, the POP3 server appends it to the bottom of the recipient's account file, which can be retrieved by the email client at any preferred time. Email client connects to the POP3 server at _______________by default to fetch emails.

  1. Port 109
  2. Port 110
  3. Port 115
  4. Port 123

Answer(s): B



Windows Security Event Log contains records of login/logout activity or other security-related events specified by the system's audit policy.
What does event ID 531 in Windows Security Event Log indicates?

  1. A user successfully logged on to a computer
  2. The logon attempt was made with an unknown user name or a known user name with a bad password
  3. An attempt was made to log on with the user account outside of the allowed time
  4. A logon attempt was made using a disabled account

Answer(s): D



When collecting evidence from the RAM, where do you look for data?

  1. Swap file
  2. SAM file
  3. Data file
  4. Log file

Answer(s): A



A rogue/unauthorized access point is one that Is not authorized for operation by a particular firm or network

  1. True
  2. False

Answer(s): A



Computer security logs contain information about the events occurring within an organization's systems and networks. Application and Web server log files are useful in detecting web attacks. The source, nature, and time of the attack can be determined by _________of the compromised system.

  1. Analyzing log files
  2. Analyzing SAM file
  3. Analyzing rainbow tables
  4. Analyzing hard disk boot records

Answer(s): A



Viewing page 13 of 37
Viewing questions 61 - 65 out of 180 questions


Post your Comments and Discuss GAQM CFA-001 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!