Free II0-001 Exam braindumps download (II0-001 exam dumps Free)

QUESTION: 16

One caution an investigator should take when examining the source of a network attack is:

an occurrence of Social Engineering
relaxed physical security
the source IP address may have been spoofed
a sniffer could be on the network

Answer(s): C

Show Answer Next Question

QUESTION: 17

Stream comparison used as a Traceback technique focuses on what two factors?

the IP address and victim port
the packet contents and audit logs
inter-packet timing and the victim port
the packet contents and inter-packet timing

Answer(s): D

Show Answer Next Question

QUESTION: 18

To perform a successful traceback, the two most prominent problems that need to be solved are locating the source of IP packets and:

the timestamp of the event
determining the first node of a connection chain
the reflector host
the victim port

Answer(s): B

Show Answer Next Question

QUESTION: 19

The most important network information that should be observed from the logs during a Traceback is the intruder IP address, the victim IP address, the victim port, protocol information and the:

source port
operating system
MAC address
timestamp

Answer(s): D

Show Answer Next Question

QUESTION: 20

A new protocol that is designed to aid in intrusion protection and IP tracebacks is known as:

Intruder Detection and Isolation Protocol (IDIP)
Intrusion Detection and Traceback Protocol (IDTP)
Facilitating Traceback Protocol (FTP)
Intruder Detection and Internet Protocol (IDIP)

Answer(s): A

Show Answer Next Question

Free II0-001 Exam Braindumps II0-001 Certified Information Forensics Investigator (CIFI) Questions 16–20 (page: 5)

QUESTION: 16

QUESTION: 17

QUESTION: 18

QUESTION: 19

QUESTION: 20

Free II0-001 Exam Braindumps
II0-001 Certified Information Forensics Investigator (CIFI) Questions 16–20 (page: 5)