312-49v9 Free Practice Test

- (Topic 1)
Which Is a Linux journaling file system?

1. A. Ext3
2. B. HFS
3. C. FAT
4. D. BFS

Correct Answer: A

- (Topic 3)
An employee is suspected of stealing proprietary information belonging to your company that he had no rights to possess. The information was stored on the employee computer that was protected with the NTFS Encrypted File System (EFS) and you had observed him copy the files to astored on the employee? computer that was protected with the NTFS Encrypted File System (EFS) and you had observed him copy the files to a floppy disk just before leaving work for the weekend. You detain the employee before he leaves the building and recover the floppy disk and secure his computer. Will you be able to break the encryption so that you can verify that the employee was in possession of the proprietary information?

1. A. EFS uses a 128-bit key that cannot be cracked, so you will not be able to recover the information
2. B. The EFS Revoked Key Agent can be used on the computer to recover the information
3. C. When the encrypted file was copied to the floppy disk, it was automatically unencrypted, so you can recover the information
4. D. When the encrypted file was copied to the floppy disk, the EFS private key was also copied to the floppy disk, so you can recover theinformation

Correct Answer: C

- (Topic 3)
You are working on a thesis for your doctorate degree in Computer Science. Your thesis is based on HTML, DHTML, and other web-based languages and how they have evolved over the years. You navigate to archive. org and view the HTML code of news.com. You then navigate to the current news.com website and copy over the source code. While searching through the code, you come across something abnormal: What have you found?

1. A. Web bug
2. B. CGI code
3. C. Trojan.downloader
4. D. Blind bug

Correct Answer: A

- (Topic 1)
When collecting evidence from the RAM, where do you look for data?

1. A. Swap file
2. B. SAM file
3. C. Data file
4. D. Log file

Correct Answer: A

- (Topic 1)
How do you define forensic computing?

1. A. It is the science of capturing, processing, and investigating data security incidents and making it acceptable to a court of law.
2. B. It is a methodology of guidelines that deals with the process of cyber investigation
3. C. It Is a preliminary and mandatory course necessary to pursue and understand fundamental principles of ethical hacking
4. D. It is the administrative and legal proceeding in the process of forensic investigation

Correct Answer: A