- (Exam Topic 4)
A computer forensics Investigator or forensic analyst Is a specially trained professional who works with law enforcement as well as private businesses to retrieve Information from computers and other types of data storage devices. For this, the analyst should have an excellent working knowledge of all aspects of the computer. Which of the following is not a duty of the analyst during a criminal investigation?

1. A. To create an investigation report
2. B. To fill the chain of custody
3. C. To recover data from suspect devices
4. D. To enforce the security of all devices and software in the scene

Correct Answer: D

- (Exam Topic 1)
After undergoing an external IT audit, George realizes his network is vulnerable to DDoS attacks. What countermeasures could he take to prevent DDoS attacks?

1. A. Enable direct broadcasts
2. B. Disable direct broadcasts
3. C. Disable BGP
4. D. Enable BGP

Correct Answer: B

- (Exam Topic 1)
When you carve an image, recovering the image depends on which of the following skills?

1. A. Recognizing the pattern of the header content
2. B. Recovering the image from a tape backup
3. C. Recognizing the pattern of a corrupt file
4. D. Recovering the image from the tape backup

Correct Answer: A

- (Exam Topic 4)
Which among the following acts has been passed by the U.S. Congress to protect investors from the possibility of fraudulent accounting activities by corporations?

1. A. Federal Information Security Management act of 2002
2. B. Gramm-Leach-Bliley act
3. C. Health insurance Probability and Accountability act of 1996
4. D. Sarbanes-Oxley act of 2002

Correct Answer: D

- (Exam Topic 4)
According to RFC 3227, which of the following is considered as the most volatile item on a typical system?

1. A. Registers and cache
2. B. Temporary system files
3. C. Archival media
4. D. Kernel statistics and memory

Correct Answer: A