Terri works for a security consulting firm that is currently performing a penetration test on First National Bank in Tokyo. Terri's duties include bypassing firewalls and switches to gain access to the network. Terri sends an IP packet to one of the company's switches with ACK bit and the source address of her machine set. What is Terri trying to accomplish by sending this IP packet?

• A.Trick the switch into thinking it already has a session with Terri's computer
• B.Enable tunneling feature on the switch
• C.Crash the switch with a DoS attack since switches cannot send ACK bits
• D.Poison the switch's MAC address table by flooding it with ACK bits

Comment: *

Name: *

Email: *

Verification: *

Analyze the hex representation of mysql-bin.000013 file in the screenshot below. Which of the following will be an inference from this analysis?

• A.A user with username bad_guy has logged into the WordPress web application
• B.An attacker with name anonymous_hacker has replaced a user bad_guy in the WordPress database
• C.A WordPress user has been created with the username bad_guy
• D.A WordPress user has been created with the username anonymous_hacker

Comment: *

Name: *

Email: *

Verification: *

Tasklist command displays a list of applications and services with their Process ID (PID) for all tasks running on either a local or a remote computer. Which of the following tasklist commands provides information about the listed processes, including the image name, PID, name, and number of the session for the process?

• A.tasklist /p
• B.tasklist /v
• C.tasklist /s
• D.tasklist /u

Comment: *

Name: *

Email: *

Verification: *

NTFS has reduced slack space than FAT, thus having lesser potential to hide data in the slack space. This is because:

• A.NTFS is a journaling file system
• B.FAT does not index files
• C.FAT is an older and inefficient file system
• D.NTFS has lower cluster size space

Comment: *

Name: *

Email: *

Verification: *

When marking evidence that has been collected with the aa/ddmmyy/nnnn/zz format, what does the nnn denote?

• A.The initials of the forensics analyst
• B.The sequential number of the exhibits seized
• C.The year the evidence was taken
• D.The sequence number for the parts of the same exhibit

Comment: *

Name: *

Email: *

Verification: *