- (Exam Topic 4)
For the purpose of preserving the evidentiary chain of custody, which of the following labels is not appropriate?

1. A. Relevant circumstances surrounding the collection
2. B. General description of the evidence
3. C. Exact location the evidence was collected from
4. D. SSN of the person collecting the evidence

Correct Answer: D

- (Exam Topic 2)
Who is responsible for the following tasks?

1. A. Non-forensics staff
2. B. Lawyers
3. C. System administrators
4. D. Local managers or other non-forensic staff

Correct Answer: A

- (Exam Topic 4)
Which of the following applications will allow a forensic investigator to track the user login sessions and user transactions that have occurred on an MS SQL Server?

1. A. ApexSQL Audit
2. B. netcat
3. C. Notepad++
4. D. Event Log Explorer

Correct Answer: A

- (Exam Topic 3)
Which of the following is a responsibility of the first responder?

1. A. Determine the severity of the incident
2. B. Collect as much information about the incident as possible
3. C. Share the collected information to determine the root cause
4. D. Document the findings

Correct Answer: B

- (Exam Topic 2)
Using Internet logging software to investigate a case of malicious use of computers, the investigator comes across some entries that appear odd.

From the log, the investigator can see where the person in question went on the Internet. From the log, it appears that the user was manually typing in different user ID numbers. What technique this user was trying?

1. A. Parameter tampering
2. B. Cross site scripting
3. C. SQL injection
4. D. Cookie Poisoning

Correct Answer: A