312-49 practice questions 81–90

1. Question 81 · 647 in bank

   Steven has been given the task of designing a computer forensics lab for the company he works for. He has found documentation on all aspects of how to design a lab except the number of exits needed. How many exits should Steven include in his design for the computer forensics lab?

   • AThree
   • BOne
   • CTwo
   • DFour

   Show answer

   Answer: B

   Explanation

   I agree with the answer but I am not conformable with the framework. Having one exit portrays danger for the examiner or investigator during an emergency...

   Source: Adapted from community discussion — Cytrail

   Next question

2. Question 82 · 647 in bank

   Sniffers that place NICs in promiscuous mode work at what layer of the OSI model?

   • ANetwork
   • BTransport
   • CPhysical
   • DData Link

   Show answer

   Answer: D

   References

   • docs.vmware.com documentation

   Next question

3. Question 83 · 647 in bank

   Assume there is a file named myfile.txt in C: drive that contains hidden data streams. Which of the following commands would you issue to display the contents of a data stream?

   • Aecho text > program:source_file
   • BC:\>ECHO text_message > myfile.txt:stream1
   • CC:\MORE < myfile.txt:stream1
   • Dmyfile.dat:stream1

   Show answer

   Answer: B

   Next question

4. Question 84 · 647 in bank

   In the following email header, where did the email first originate from?

   

   • ASomedomain.com
   • BSmtp1.somedomain.com
   • CSimon1.state.ok.gov.us
   • DDavid1.state.ok.gov.us

   Show answer

   Answer: C

   Next question

5. Question 85 · 647 in bank

   Area density refers to:

   • Athe amount of data per disk
   • Bthe amount of data per partition
   • Cthe amount of data per square inch
   • Dthe amount of data per platter

   Show answer

   Answer: C

   Next question

6. Question 86 · 647 in bank

   This type of testimony is presented by someone who does the actual fieldwork and does not offer a view in court.

   • ACivil litigation testimony
   • BExpert testimony
   • CVictim advocate testimony
   • DTechnical testimony

   Show answer

   Answer: D

   Next question

7. Question 87 · 647 in bank

   Corporate investigations are typically easier than public investigations because:

   • Athe users have standard corporate equipment and software
   • Bthe investigator does not have to get a warrant
   • Cthe investigator has to get a warrant
   • Dthe users can load whatever they want on their machines

   Show answer

   Answer: B

   Next question

8. Question 88 · 647 in bank

   On an Active Directory network using NTLM authentication, where on the domain controllers are the passwords stored?

   • ASAM
   • BAMS
   • CShadow file
   • DPassword.conf

   Show answer

   Answer: A

   Next question

9. Question 89 · 647 in bank

   Which of the following should a computer forensics lab used for investigations have?

   • Aisolation
   • Brestricted access
   • Copen access
   • Dan entry log

   Show answer

   Answer: B

   Next question

10. Question 90 · 647 in bank

    In handling computer-related incidents, which IT role should be responsible for recovery, containment, and prevention to constituents?

    • ASecurity Administrator
    • BNetwork Administrator
    • CDirector of Information Technology
    • DDirector of Administration

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

312-49 practice, question 81. 647 questions available.