Question 1

You work as a penetration tester for Hammond Security Consultants. You are currently working on a contract for the state government of California. Your next step is to initiate a DoS attack on their network. Why would you want to initiate a DoS attack on a system you are testing?

Options :

A : Show outdated equipment so it can be replaced

B : List weak points on their network

C : Use attack as a launching point to penetrate deeper into the network

D : Demonstrate that no system can be protected against DoS attacks

Answer: B

Question 2

What is the capacity of Recycle bin in a system running on Windows Vista?

Options :

A : 2.99GB

B : 3.99GB

C : Unlimited

D : 10% of the partition space

Answer: C

Question 3

Consider a scenario where a forensic investigator is performing malware analysis on a memory dump acquired from a victims computer. The investigator uses Volatility Framework to analyze RAM contents; which plugin helps investigator to identify hidden processes or injected code/DLL in the memory dump?

Options :

A : pslist

B : malscan

C : mallist

D : malfind

Answer: D

Question 4

Which cloud model allows an investigator to acquire the instance of a virtual machine and initiate the forensics examination process?

Options :

A : PaaS model

B : IaaS model

C : SaaS model

D : SecaaS model

Answer: B

Question 5

Rule 1002 of Federal Rules of Evidence (US) talks about_____

Options :

A : Admissibility of original

B : Admissibility of duplicates

C : Requirement of original

D : Admissibility of other evidence of contents

Answer: C

Higher Test Marks with Free Online 312-49 Exam Practice

Buying Options: