312-49v9 Free Practice Test

- (Topic 1)
System software password cracking is defined as cracking the operating system and all other utilities that enable a computer to function

1. A. True
2. B. False

Correct Answer: A

- (Topic 3)
You have compromised a lower-level administrator account on an Active Directory network of a small company in Dallas, Texas. You discover Domain Controllers through enumeration. You connect to one of the Domain Controllers on port 389 using ldp.exe. What are you trying to accomplish here?

1. A. Enumerate domain user accounts and built-in groups
2. B. Enumerate MX and A records from DNS
3. C. Establish a remote connection to the Domain Controller
4. D. Poison the DNS records with false records

Correct Answer: A

- (Topic 2)
Heather, a computer forensics investigator, is assisting a group of investigators working on a large computer fraud case involving over 20 people. These 20 people, working in different offices, allegedly siphoned off money from many different client accounts. Heather responsibility is to findThese 20 people, working in different offices, allegedly siphoned off money from many different client accounts. Heather? responsibility is to find out how the accused people communicated between each other. She has searched their email and their computers and has not found any useful evidence. Heather then finds some possibly useful evidence under the desk of one of the accused. In an envelope she finds a piece of plastic with numerous holes cut out of it. Heather then finds the same exact piece of plastic with holes at many of the other accused peoples?desks. Heather believes that the 20 people involved in the case were using a cipher to send secret messages in between each other. What type of cipher was used by the accused in this case?

1. A. Grill cipher
2. B. Null cipher
3. C. Text semagram
4. D. Visual semagram

Correct Answer: A

- (Topic 1)
Wireless network discovery tools use two different methodologies to detect, monitor and log a WLAN device (i.e. active scanning and passive scanning). Active scanning methodology involves ____ and waiting for responses from available wireless networks.

1. A. Broadcasting a probe request frame
2. B. Sniffing the packets from the airwave
3. C. Scanning the network
4. D. Inspecting WLAN and surrounding networks

Correct Answer: A

- (Topic 3)
Melanie was newly assigned to an investigation and asked to make a copy of all the evidence from the compromised system. Melanie did a DOS copy of all the files on the system. What would be the primary reason for you to recommend a disk imaging tool?

1. A. A disk imaging tool would check for CRC32s for internal self checking and validation and have MD5 checksum
2. B. Evidence file format will contain case data entered by the examiner and encrypted at the beginning of the evidence file
3. C. A simple DOS copy will not include deleted files, file slack and other information
4. D. There is no case for an imaging tool as it will use a closed, proprietary format that if compared to the original will not match up sector for sector

Correct Answer: C