312-49v10 Free Practice Test

- (Exam Topic 1)
Paul's company is in the process of undergoing a complete security audit including logical and physical security testing. After all logical tests were performed; it is now time for the physical round to begin. None of the employees are made aware of this round of testing. The security-auditing firm sends in a technician dressed as an electrician. He waits outside in the lobby for some employees to get to work and follows behind them when they access the restricted areas. After entering the main office, he is able to get into the server room telling the IT manager that there is a problem with the outlets in that room. What type of attack has the technician performed?

1. A. Tailgating
2. B. Backtrapping
3. C. Man trap attack
4. D. Fuzzing

Correct Answer: A

- (Exam Topic 2)
An executive has leaked the company trade secrets through an external drive. What process should the investigation team take if they could retrieve his system?

1. A. Postmortem Analysis
2. B. Real-Time Analysis
3. C. Packet Analysis
4. D. Malware Analysis

Correct Answer: A

- (Exam Topic 1)
To preserve digital evidence, an investigator should _______.

1. A. Make two copies of each evidence item using a single imaging tool
2. B. Make a single copy of each evidence item using an approved imaging tool
3. C. Make two copies of each evidence item using different imaging tools
4. D. Only store the original evidence item

Correct Answer: C

- (Exam Topic 1)
You work as a penetration tester for Hammond Security Consultants. You are currently working on a contract for the state government of California. Your next step is to initiate a DoS attack on their network. Why would you want to initiate a DoS attack on a system you are testing?

1. A. Show outdated equipment so it can be replaced
2. B. List weak points on their network
3. C. Use attack as a launching point to penetrate deeper into the network
4. D. Demonstrate that no system can be protected against DoS attacks

Correct Answer: B

- (Exam Topic 3)
As a part of the investigation, Caroline, a forensic expert, was assigned the task to examine the transaction logs pertaining to a database named Transfers. She used SQL Server Management Studio to collect the active transaction log files of the database. Caroline wants to extract detailed information on the logs, including AllocUnitId, page id, slot id, etc. Which of the following commands does she need to execute in order to extract the desired information?

1. A. DBCC LOG(Transfers, 1)
2. B. DBCC LOG(Transfers, 3)
3. C. DBCC LOG(Transfers, 0)
4. D. DBCC LOG(Transfers, 2)

Correct Answer: D