- (Exam Topic 2)
Bob works as information security analyst for a big finance company. One day, the anomaly-based intrusion detection system alerted that a volumetric DDOS targeting the main IP of the main web server was occurring. What kind of attack is it?

1. A. IDS attack
2. B. APT
3. C. Web application attack
4. D. Network attack

Correct Answer: D

- (Exam Topic 2)
Your company's network just finished going through a SAS 70 audit. This audit reported that overall, your network is secure, but there are some areas that needs improvement. The major area was SNMP security. The audit company recommended turning off SNMP, but that is not an option since you have so many remote nodes to keep track of. What step could you take to help secure SNMP on your network?

1. A. Block all internal MAC address from using SNMP
2. B. Block access to UDP port 171
3. C. Block access to TCP port 171
4. D. Change the default community string names

Correct Answer: D

- (Exam Topic 1)
A law enforcement officer may only search for and seize criminal evidence with , which are facts or circumstances that would lead a reasonable person to believe a crime has been committed or is about to be committed, evidence of the specific crime exists and the evidence of the specific crime exists at the place to be searched.

1. A. Mere Suspicion
2. B. A preponderance of the evidence
3. C. Probable cause
4. D. Beyond a reasonable doubt

Correct Answer: C

- (Exam Topic 3)
What document does the screenshot represent?

1. A. Expert witness form
2. B. Search warrant form
3. C. Chain of custody form
4. D. Evidence collection form

Correct Answer: D

- (Exam Topic 2)
When using an iPod and the host computer is running Windows, what file system will be used?

1. A. iPod+
2. B. HFS
3. C. FAT16
4. D. FAT32

Correct Answer: D