- (Exam Topic 2)
When making the preliminary investigations in a sexual harassment case, how many investigators are you recommended having?

1. A. One
2. B. Two
3. C. Three
4. D. Four

Correct Answer: B

- (Exam Topic 2)
What is the CIDR from the following screenshot?

1. A. /24A./24A./24
2. B. /32 B./32 B./32
3. C. /16 C./16 C./16
4. D. /8D./8D./8

Correct Answer: D

- (Exam Topic 3)
To reach a bank web site, the traffic from workstations must pass through a firewall. You have been asked to review the firewall configuration to ensure that workstations in network 10.10.10.0/24 can only reach the bank web site 10.20.20.1 using https. Which of the following firewall rules meets this requirement?

1. A. if (source matches 10.10.10.0/24 and destination matches 10.20.20.1 and port matches 443) then permit
2. B. if (source matches 10.10.10.0/24 and destination matches 10.20.20.1 and port matches 80 or 443) then permit
3. C. if (source matches 10.10.10.0 and destination matches 10.20.20.1 and port matches 443) then permit

Correct Answer: A

- (Exam Topic 3)
Adam, a forensic analyst, is preparing VMs for analyzing a malware. Which of the following is NOT a best
practice?

1. A. Isolating the host device
2. B. Installing malware analysis tools
3. C. Using network simulation tools
4. D. Enabling shared folders

Correct Answer: D

- (Exam Topic 1)
This organization maintains a database of hash signatures for known software.

1. A. International Standards Organization
2. B. Institute of Electrical and Electronics Engineers
3. C. National Software Reference Library
4. D. American National standards Institute

Correct Answer: C