- (Exam Topic 2)
Netstat is a tool for collecting information regarding network connections. It provides a simple view of TCP and UDP connections, and their state and network traffic statistics. Which of the following commands shows you the TCP and UDP network connections, listening ports, and the identifiers?

1. A. netstat – r
2. B. netstat – ano
3. C. netstat – b
4. D. netstat – s

Correct Answer: B

- (Exam Topic 2)
Which among the following search warrants allows the first responder to get the victim’s computer information such as service records, billing records, and subscriber information from the service provider?

1. A. Citizen Informant Search Warrant
2. B. Electronic Storage Device Search Warrant
3. C. John Doe Search Warrant
4. D. Service Provider Search Warrant

Correct Answer: B

- (Exam Topic 3)
What does the Rule 101 of Federal Rules of Evidence states?

1. A. Scope of the Rules, where they can be applied
2. B. Purpose of the Rules
3. C. Limited Admissibility of the Evidence
4. D. Rulings on Evidence

Correct Answer: A

- (Exam Topic 2)
In Windows Security Event Log, what does an event id of 530 imply?

1. A. Logon Failure – Unknown user name or bad password
2. B. Logon Failure – User not allowed to logon at this computer
3. C. Logon Failure – Account logon time restriction violation
4. D. Logon Failure – Account currently disabled

Correct Answer: C

- (Exam Topic 1)
In a FAT32 system, a 123 KB file will use how many sectors?

1. A. 34
2. B. 25
3. C. 11
4. D. 56

Correct Answer: B