Free CFA-001 Exam Braindumps
Certified Forensic Analyst Questions 76–80 (page: 17)

Buffer Overflow occurs when an application writes more data to a block of memory, or buffer, than the buffer is allocated to hold. Buffer overflow attacks allow an attacker to modify the _______________in order to control the process execution, crash the process and modify internal variables.

Physical security recommendations: There should be only one entrance to a forensics lab

File signature analysis involves collecting information from the __________ of a file to determine the type and function of the file

You should always work with original evidence

When a system is compromised, attackers often try to disable auditing, in Windows 7; modifications to the audit policy are recorded as entries of Event ID____________.