- (Exam Topic 3)
The Apache server saves diagnostic information and error messages that it encounters while processing requests. The default path of this file is usr/local/apache/logs/error.log in Linux. Identify the Apache error log from the following logs.

1. A. http://victim.com/scripts/..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+C:\Winnt\system32\Logfiles\W3SVC1
2. B. [Wed Oct 11 14:32:52 2000] [error] [client 127.0.0.1] client denied by server configuration:/export/home/live/ap/htdocs/test
3. C. 127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700]"GET /apache_pb.gif HTTP/1.0" 200 2326
4. D. 127.0.0.1 - - [10/Apr/2007:10:39:11 +0300] ] [error] "GET /apache_pb.gif HTTP/1.0" 200 2326

Correct Answer: B

- (Exam Topic 2)
A picture file is recovered from a computer under investigation. During the investigation process, the file is enlarged 500% to get a better view of its contents. The picture quality is not degraded at all from this process. What kind of picture is this file. What kind of picture is this file?

1. A. Raster image
2. B. Vector image
3. C. Metafile image
4. D. Catalog image

Correct Answer: B

- (Exam Topic 4)
An investigator Is examining a file to identify any potentially malicious content. To avoid code execution and still be able to uncover hidden indicators of compromise (IOC), which type of examination should the investigator perform:

1. A. Threat hunting
2. B. Threat analysis
3. C. Static analysis
4. D. Dynamic analysis

Correct Answer: B

- (Exam Topic 2)
While looking through the IIS log file of a web server, you find the following entries:

What is evident from this log file?

1. A. Web bugs
2. B. Cross site scripting
3. C. Hidden fields
4. D. SQL injection is possible

Correct Answer: D

- (Exam Topic 3)
During forensics investigations, investigators tend to collect the system time at first and compare it with UTC. What does the abbreviation UTC stand for?

1. A. Coordinated Universal Time
2. B. Universal Computer Time
3. C. Universal Time for Computers
4. D. Correlated Universal Time

Correct Answer: A