Brian needs to acquire data from RAID storage. Which of the following acquisition methods is recommended to retrieve only the data relevant to the investigation?

• A.Bit-by-bit Acquisition
• B.Static Acquisition
• C.Bit-stream disk-to-disk Acquisition
• D.Sparse or Logical Acquisition

Comment: *

Name: *

Email: *

Verification: *

Which of the following setups should a tester choose to analyze malware behavior?

• A.A normal system without internet connect
• B.A virtual system with internet connection
• C.A normal system with internet connection
• D.A virtual system with network simulation for internet connection

Comment: *

Name: *

Email: *

Verification: *

Which of the following tools will help the investigator to analyze web server logs?

• A.XRY LOGICAL
• B.Deep Log Monitor
• C.Deep Log Analyzer
• D.LanWhois

Comment: *

Name: *

Email: *

Verification: *

Your company's network just finished going through a SAS 70 audit. This audit reported that overall, your network is secure, but there are some areas that needs improvement. The major area was SNMP security. The audit company recommended turning off SNMP, but that is not an option since you have so many remote nodes to keep track of. What step could you take to help secure SNMP on your network?

• A.Block all internal MAC address from using SNMP
• B.Block access to TCP port 171
• C.Block access to UDP port 171
• D.Change the default community string names

Comment: *

Name: *

Email: *

Verification: *

Which of the following file formats allows the user to compress the acquired data as well as keep it randomly accessible?

• A.Generic Forensic Zip (gfzip)
• B.Advanced Forensic Framework 4
• C.Advanced Forensics Format (AFF)
• D.Proprietary Format

Comment: *

Name: *

Email: *

Verification: *