ADAM, an employee from a multinational company, uses his company’s accounts to send e-mails to a third party with their spoofed mail address. How can you categorize this type of account?

1. A. Inappropriate usage incident
2. B. Unauthorized access incident
3. C. Network intrusion incident
4. D. Denial of Service incident

Correct Answer: A

Which of the following is NOT one of the techniques used to respond to insider threats:

1. A. Placing malicious users in quarantine network, so that attack cannot be spread
2. B. Preventing malicious users from accessing unclassified information
3. C. Disabling the computer systems from network connection
4. D. Blocking malicious user accounts

Correct Answer: B

In NIST risk assessment/ methodology; the process of identifying the boundaries of an IT system along with the resources and information that constitute the system is known as:

1. A. Asset Identification
2. B. System characterization
3. C. Asset valuation
4. D. System classification

Correct Answer: B

The correct order or sequence of the Computer Forensic processes is:

1. A. Preparation, analysis, examination, collection, and reporting
2. B. Preparation, collection, examination, analysis, and reporting
3. C. Preparation, examination, collection, analysis, and reporting
4. D. Preparation, analysis, collection, examination, and reporting

Correct Answer: B

Computer forensics is methodical series of techniques and procedures for gathering evidence from computing equipment, various storage devices and or digital media that can be presented in a course of law in a coherent and meaningful format. Which one of the following is an appropriate flow of steps in the computer forensics process:

1. A. Examination> Analysis > Preparation > Collection > Reporting
2. B. Preparation > Analysis > Collection > Examination > Reporting
3. C. Analysis > Preparation > Collection > Reporting > Examination
4. D. Preparation > Collection > Examination > Analysis > Reporting

Correct Answer: D