312-49v10 Free Practice Test

- (Exam Topic 3)
As a part of the investigation, Caroline, a forensic expert, was assigned the task to examine the transaction logs pertaining to a database named Transfers. She used SQL Server Management Studio to collect the active transaction log files of the database. Caroline wants to extract detailed information on the logs, including AllocUnitId, page id, slot id, etc. Which of the following commands does she need to execute in order to extract the desired information?

1. A. DBCC LOG(Transfers, 1)
2. B. DBCC LOG(Transfers, 3)
3. C. DBCC LOG(Transfers, 0)
4. D. DBCC LOG(Transfers, 2)

Correct Answer: D

- (Exam Topic 1)
Lance wants to place a honeypot on his network. Which of the following would be your recommendations?

1. A. Use a system that has a dynamic addressing on the network
2. B. Use a system that is not directly interacting with the router
3. C. Use it on a system in an external DMZ in front of the firewall
4. D. It doesn't matter as all replies are faked

Correct Answer: D

- (Exam Topic 2)
Bob works as information security analyst for a big finance company. One day, the anomaly-based intrusion detection system alerted that a volumetric DDOS targeting the main IP of the main web server was occurring. What kind of attack is it?

1. A. IDS attack
2. B. APT
3. C. Web application attack
4. D. Network attack

Correct Answer: D

- (Exam Topic 3)
Select the tool appropriate for finding the dynamically linked lists of an application or malware.

1. A. SysAnalyzer
2. B. ResourcesExtract
3. C. PEiD
4. D. Dependency Walker

Correct Answer: D

- (Exam Topic 2)
While presenting his case to the court, Simon calls many witnesses to the stand to testify. Simon decides to call Hillary Taft, a lay witness, to the stand. Since Hillary is a lay witness, what field would she be considered an expert in?

1. A. Technical material related to forensics
2. B. No particular field
3. C. Judging the character of defendants/victims
4. D. Legal issues

Correct Answer: B