- (Exam Topic 3)
Which of the following processes is part of the dynamic malware analysis?

1. A. Process Monitoring
2. B. Malware disassembly
3. C. Searching for the strings
4. D. File fingerprinting

Correct Answer: A

- (Exam Topic 1)
The rule of thumb when shutting down a system is to pull the power plug. However, it has certain drawbacks. Which of the following would that be?

1. A. Any data not yet flushed to the system will be lost
2. B. All running processes will be lost
3. C. The /tmp directory will be flushed
4. D. Power interruption will corrupt the pagefile

Correct Answer: A

- (Exam Topic 1)
What file structure database would you expect to find on floppy disks?

1. A. NTFS
2. B. FAT32
3. C. FAT16
4. D. FAT12

Correct Answer: D

- (Exam Topic 3)
Andie, a network administrator, suspects unusual network services running on a windows system. Which of the following commands should he use to verify unusual network services started on a Windows system?

1. A. net serv
2. B. netmgr
3. C. lusrmgr
4. D. net start

Correct Answer: D

- (Exam Topic 1)
Why are Linux/Unix based computers better to use than Windows computers for idle scanning?

1. A. Linux/Unix computers are easier to compromise
2. B. Linux/Unix computers are constantly talking
3. C. Windows computers are constantly talking
4. D. Windows computers will not respond to idle scans

Correct Answer: C