Question 1

Bob, a forensic investigator, was instructed to review a Windows machine and identify any anonymous activities performed using it. In this process, Bob used the command "netstat -ano" to view all the active connections in the system and determined that the connections established by the Tor browser were closed. Which of the following states of the connections established by Tor indicates that the Tor browser is closed?

Options :

A : CLOSE_WAIT

B : TIME_WAIT

C : ESTABLISHED

D : LISTENING

Answer: B

Question 2

Below are the various steps involved in an email crime investigation.1.Acquiring the email data2.Analyzing email headers3.Examining email messages4.Recovering deleted email messages5.Seizing the computer and email accounts6.Retrieving email headersWhat is the correct sequence of steps involved in the investigation of an email crime?

Options :

A : 5-->1-->3-->6-->2-->4

B : 2-->4-->3-->6-->5-->1

C : 1-->3-->6-->4-->5-->2

D : 1-->3-->4-->2-->5-->6

Answer: A

Question 3

David, a cybercriminal, targeted a community and initiated anti-social campaigns online. In this process, he used a layer of the web that allowed him to maintain anonymity during the campaign. Which of the following layers of the web allowed David to hide his presence during the anti-social campaign?

Options :

A : Surface Web

B : World Wide Web

C : Dark Web

D : Deep Web

Answer: C

Question 4

Which of the following files belonging to the Extensible Storage Engine (ESE) stores the mail data in Microsoft Exchange Server?

Options :

A : DataStore.edb

B : Mail.MSMessageStore

C : WLCalendarStore.edb

D : Database.edb

Answer: D

Question 5

Which of the following Tor relay nodes in the Tor circuit is designed to transfer data in an encrypted format?

Options :

A : Entry relay

B : Guard relay

C : Exit relay

D : Middle relay

Answer: D

Higher Test Marks with Free Online 112-57 Exam Practice

Buying Options: