312-49v10 Free Practice Test

- (Exam Topic 2)
Who is responsible for the following tasks?

1. A. Non-forensics staff
2. B. Lawyers
3. C. System administrators
4. D. Local managers or other non-forensic staff

Correct Answer: A

- (Exam Topic 1)
Hackers can gain access to Windows Registry and manipulate user passwords, DNS settings, access rights or others features that they may need in order to accomplish their objectives. One simple method for loading an application at startup is to add an entry (Key) to the following Registry Hive:

1. A. HKEY_LOCAL_MACHINE\hardware\windows\start
2. B. HKEY_LOCAL_USERS\Software\Microsoft\old\Version\Load
3. C. HKEY_CURRENT_USER\Microsoft\Default
4. D. HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run

Correct Answer: D

- (Exam Topic 2)
On an Active Directory network using NTLM authentication, where on the domain controllers are the passwords stored?

1. A. SAM
2. B. AMS
3. C. Shadow file
4. D. Password.conf

Correct Answer: A

- (Exam Topic 3)
Report writing is a crucial stage in the outcome of an investigation. Which information should not be included in the report section?

1. A. Speculation or opinion as to the cause of the incident
2. B. Purpose of the report
3. C. Author of the report
4. D. Incident summary

Correct Answer: A

- (Exam Topic 3)
An investigator is analyzing a checkpoint firewall log and comes across symbols. What type of log is he looking at?

1. A. Security event was monitored but not stopped
2. B. Malicious URL detected
3. C. An email marked as potential spam
4. D. Connection rejected

Correct Answer: C