312-49v10 Free Practice Test

- (Exam Topic 3)
Email archiving is a systematic approach to save and protect the data contained in emails so that it can be accessed fast at a later date. There are two main archive types, namely Local Archive and Server Storage Archive. Which of the following statements is correct while dealing with local archives?

1. A. Server storage archives are the server information and settings stored on a local system, whereas the local archives are the local email client information stored on the mail server
2. B. It is difficult to deal with the webmail as there is no offline archive in most case
3. C. So consult your counsel on the case as to the best way to approach and gain access to the required data on servers
4. D. Local archives should be stored together with the server storage archives in order to be admissible in a court of law
5. E. Local archives do not have evidentiary value as the email client may alter the message data

Correct Answer: B

- (Exam Topic 1)
You are working for a large clothing manufacturer as a computer forensics investigator and are called in to investigate an unusual case of an employee possibly stealing clothing designs from the company and selling them under a different brand name for a different company. What you discover during the course of the investigation is that the clothing designs are actually original products of the employee and the company has no policy against an employee selling his own designs on his own time. The only thing that you can find that the employee is doing wrong is that his clothing design incorporates the same graphic symbol as that of the company with only the wording in the graphic being different. What area of the law is the employee violating?

1. A. trademark law
2. B. copyright law
3. C. printright law
4. D. brandmark law

Correct Answer: A

- (Exam Topic 1)
With the standard Linux second extended file system (Ext2fs), a file is deleted when the inode internal link count reaches _____.

1. A. 10
2. B. 100
3. C. 1

Correct Answer: A

- (Exam Topic 1)
What type of file is represented by a colon (:) with a name following it in the Master File Table of NTFS disk?

1. A. A compressed file
2. B. A Data stream file
3. C. An encrypted file
4. D. A reserved file

Correct Answer: B

- (Exam Topic 1)
A suspect is accused of violating the acceptable use of computing resources, as he has visited adult websites and downloaded images. The investigator wants to demonstrate that the suspect did indeed visit these sites. However, the suspect has cleared the search history and emptied the cookie cache. Moreover, he has removed any images he might have downloaded. What can the investigator do to prove the violation?

1. A. Image the disk and try to recover deleted files
2. B. Seek the help of co-workers who are eye-witnesses
3. C. Check the Windows registry for connection data (you may or may not recover)
4. D. Approach the websites for evidence

Correct Answer: A