312-49v10 Free Practice Test

- (Exam Topic 1)
Profiling is a forensics technique for analyzing evidence with the goal of identifying the perpetrator from their various activity. After a computer has been compromised by a hacker, which of the following would be most important in forming a profile of the incident?

1. A. The manufacturer of the system compromised
2. B. The logic, formatting and elegance of the code used in the attack
3. C. The nature of the attack
4. D. The vulnerability exploited in the incident

Correct Answer: B

- (Exam Topic 3)
Which of the following files contains the traces of the applications installed, run, or uninstalled from a system?

1. A. Virtual Files
2. B. Image Files
3. C. Shortcut Files
4. D. Prefetch Files

Correct Answer: C

- (Exam Topic 3)
You are asked to build a forensic lab and your manager has specifically informed you to use copper for lining the walls, ceilings, and floor. What is the main purpose of lining the walls, ceilings, and floor with copper?

1. A. To control the room temperature
2. B. To strengthen the walls, ceilings, and floor
3. C. To avoid electromagnetic emanations
4. D. To make the lab sound proof

Correct Answer: D

- (Exam Topic 2)
Which of the following tools will help the investigator to analyze web server logs?

1. A. XRY LOGICAL
2. B. LanWhois
3. C. Deep Log Monitor
4. D. Deep Log Analyzer

Correct Answer: D

- (Exam Topic 1)
What happens when a file is deleted by a Microsoft operating system using the FAT file system?

1. A. only the reference to the file is removed from the FAT
2. B. the file is erased and cannot be recovered
3. C. a copy of the file is stored and the original file is erased
4. D. the file is erased but can be recovered

Correct Answer: A