- (Topic 3)
What is kept in the following directory? HKLMSECURITYPolicySecrets

1. A. IAS account names and passwords
2. B. Service account passwords in plain text
3. C. Local store PKI Kerberos certificates
4. D. Cached password hashes for the past 20 users

Correct Answer: B

- (Topic 3)
Jim performed a vulnerability analysis on his network and found no potential problems. He runs another utility that executes exploits against his system to verify the results of the vulnerability test. The second utility executes five known exploits against his network in which the vulnerability analysis said were not exploitable. What kind of results did Jim receive from his vulnerability analysis?

1. A. False negatives
2. B. True negatives
3. C. True positives
4. D. False positives

Correct Answer: A

- (Topic 3)
Windows identifies which application to open a file with by examining which of the following?

1. A. The File extension
2. B. The file attributes
3. C. The file Signature at the end of the file
4. D. The file signature at the beginning of the file

Correct Answer: A

- (Topic 1)
Ron. a computer forensics expert, Is Investigating a case involving corporate espionage. He has recovered several mobile computing devices from the crime scene. One of the evidence that Ron possesses is a mobile phone from Nokia that was left in on condition. Ron needs to recover the IMEI number of the device to establish the identity of the device owner. Which of the following key combinations he can use to recover the IMEI number?

1. A. #*06*#
2. B. *#06#
3. C. #06r
4. D. *1MEI#

Correct Answer: B

- (Topic 1)
Netstat is a tool for collecting Information regarding network connections. It provides a simple view of TCP and UDP connections, and their state and network traffic statistics.
Which of the following commands shows you the TCP and UDP network connections, listening ports, and the identifiers?

1. A. netstat -ano
2. B. netstat -b
3. C. netstat -r
4. D. netstat -s

Correct Answer: A