- (Exam Topic 1)
It takes mismanaged case/s to ruin your professional reputation as a computer forensics examiner?

1. A. by law, three
2. B. quite a few
3. C. only one
4. D. at least two

Correct Answer: C

- (Exam Topic 2)
John is working on his company policies and guidelines. The section he is currently working on covers company documents; how they should be handled, stored, and eventually destroyed. John is concerned about the process whereby outdated documents are destroyed. What type of shredder should John write in the guidelines to be used when destroying documents?

1. A. Strip-cut shredder
2. B. Cross-cut shredder
3. C. Cross-hatch shredder
4. D. Cris-cross shredder

Correct Answer: B

- (Exam Topic 2)
Richard is extracting volatile data from a system and uses the command doskey/history. What is he trying to extract?

1. A. Events history
2. B. Previously typed commands
3. C. History of the browser
4. D. Passwords used across the system

Correct Answer: B

- (Exam Topic 1)
Terri works for a security consulting firm that is currently performing a penetration test on First National Bank in Tokyo. Terri's duties include bypassing firewalls and switches to gain access to the network. Terri sends an IP packet to one of the company's switches with ACK bit and the source address of her machine set. What is Terri trying to accomplish by sending this IP packet?

1. A. Trick the switch into thinking it already has a session with Terri's computer
2. B. Poison the switch's MAC address table by flooding it with ACK bits
3. C. Crash the switch with a DoS attack since switches cannot send ACK bits
4. D. Enable tunneling feature on the switch

Correct Answer: A

- (Exam Topic 2)
Which of the following is a record of the characteristics of a file system, including its size, the block size, the empty and the filled blocks and their respective counts, the size and location of the inode tables, the disk block map and usage information, and the size of the block groups?

1. A. Inode bitmap block
2. B. Superblock
3. C. Block bitmap block
4. D. Data block

Correct Answer: B