312-49v10 Free Practice Test

- (Exam Topic 3)
Which of the following statements is incorrect when preserving digital evidence?

1. A. Verify if the monitor is in on, off, or in sleep mode
2. B. Turn on the computer and extract Windows event viewer log files
3. C. Remove the plug from the power router or modem
4. D. Document the actions and changes that you observe in the monitor, computer, printer, or in other peripherals

Correct Answer: B

- (Exam Topic 1)
Microsoft Outlook maintains email messages in a proprietary format in what type of file?

1. A. .email
2. B. .mail
3. C. .pst
4. D. .doc

Correct Answer: C

- (Exam Topic 1)
What TCP/UDP port does the toolkit program netstat use?

1. A. Port 7
2. B. Port 15
3. C. Port 23
4. D. Port 69

Correct Answer: B

- (Exam Topic 1)
This is original file structure database that Microsoft originally designed for floppy disks. It is written to the outermost track of a disk and contains information about each file stored on the drive.

1. A. Master Boot Record (MBR)
2. B. Master File Table (MFT)
3. C. File Allocation Table (FAT)
4. D. Disk Operating System (DOS)

Correct Answer: C

- (Exam Topic 1)
Sectors in hard disks typically contain how many bytes?

1. A. 256
2. B. 512
3. C. 1024
4. D. 2048

Correct Answer: B