- (Exam Topic 2)
Paraben Lockdown device uses which operating system to write hard drive data?

1. A. Mac OS
2. B. Red Hat
3. C. Unix
4. D. Windows

Correct Answer: D

- (Exam Topic 1)
Item 2If you come across a sheepdip machine at your client site, what would you infer?

1. A. A sheepdip coordinates several honeypots
2. B. A sheepdip computer is another name for a honeypot
3. C. A sheepdip computer is used only for virus-checking.
4. D. A sheepdip computer defers a denial of service attack

Correct Answer: C

- (Exam Topic 3)
Randy has extracted data from an old version of a Windows-based system and discovered info file Dc5.txt in the system recycle bin. What does the file name denote?

1. A. A text file deleted from C drive in sixth sequential order
2. B. A text file deleted from C drive in fifth sequential order
3. C. A text file copied from D drive to C drive in fifth sequential order
4. D. A text file copied from C drive to D drive in fifth sequential order

Correct Answer: B

- (Exam Topic 1)
John is using Firewalk to test the security of his Cisco PIX firewall. He is also utilizing a sniffer located on a subnet that resides deep inside his network. After analyzing the sniffer log files, he does not see any of the traffic produced by Firewalk. Why is that?

1. A. Firewalk cannot pass through Cisco firewalls
2. B. Firewalk sets all packets with a TTL of zero
3. C. Firewalk cannot be detected by network sniffers
4. D. Firewalk sets all packets with a TTL of one

Correct Answer: D

- (Exam Topic 3)
Tasklist command displays a list of applications and services with their Process ID (PID) for all tasks running on either a local or a remote computer. Which of the following tasklist commands provides information about the listed processes, including the image name, PID, name, and number of the session for the process?

1. A. tasklist /p
2. B. tasklist /v
3. C. tasklist /u
4. D. tasklist /s

Correct Answer: B