312-49v10 Free Practice Test

- (Exam Topic 4)
Cloud forensic investigations impose challenges related to multi-jurisdiction and multi-tenancy aspects. To have a better understanding of the roles and responsibilities between the cloud service provider (CSP) and the client, which document should the forensic investigator review?

1. A. Service level agreement
2. B. Service level management
3. C. National and local regulation
4. D. Key performance indicator

Correct Answer: A

- (Exam Topic 3)
What document does the screenshot represent?

1. A. Expert witness form
2. B. Search warrant form
3. C. Chain of custody form
4. D. Evidence collection form

Correct Answer: D

- (Exam Topic 1)
Lance wants to place a honeypot on his network. Which of the following would be your recommendations?

1. A. Use a system that has a dynamic addressing on the network
2. B. Use a system that is not directly interacting with the router
3. C. Use it on a system in an external DMZ in front of the firewall
4. D. It doesn't matter as all replies are faked

Correct Answer: D

- (Exam Topic 1)
An Employee is suspected of stealing proprietary information belonging to your company that he had no rights to possess. The information was stored on the Employees Computer that was protected with the NTFS Encrypted File System (EFS) and you had observed him copy the files to a floppy disk just before leaving work for the weekend. You detain the Employee before he leaves the building and recover the floppy disks and secure his computer. Will you be able to break the encryption so that you can verify that that the employee was in possession of the proprietary information?

1. A. EFS uses a 128-bit key that can't be cracked, so you will not be able to recover the information
2. B. When the encrypted file was copied to the floppy disk, it was automatically unencrypted, so you can recover the information.
3. C. The EFS Revoked Key Agent can be used on the Computer to recover the information
4. D. When the Encrypted file was copied to the floppy disk, the EFS private key was also copied to the floppy disk, so you can recover the information.

Correct Answer: B

- (Exam Topic 4)
A call detail record (CDR) provides metadata about calls made over a phone service. From the following data fields, which one Is not contained in a CDR.

1. A. The call duration
2. B. A unique sequence number identifying the record
3. C. The language of the call
4. D. Phone number receiving the call

Correct Answer: C