During which phase of the forensic process are tools and techniques used to extract information from the collected data?

• A.examination
• B.collection
• C.investigation
• D.reporting

Comment: *

Name: *

Email: *

Verification: *

What does cyber attribution identity in an investigation?

• A.cause of an attack
• B.vulnerabilities exploited
• C.threat actors of an attack
• D.exploit of an attack

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Which component is identifiable in this exhibit?

• A.Trusted Root Certificate store on the local machine
• B.Windows PowerShell verb
• C.Windows Registry hive
• D.local service in the Windows Services Manager

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. What is the expected result when the "Allow subdissector to reassemble TCP streams" feature is enabled?

• A.insert TCP subdissectors
• B.extract a file from a packet capture
• C.disable TCP streams
• D.unfragment TCP

Comment: *

Name: *

Email: *

Verification: *

Which security monitoring data type requires the largest storage space?

• A.session data
• B.transaction data
• C.statistical data
• D.full packet capture

Comment: *

Name: *

Email: *

Verification: *