Which of the following Event Correlation Approach is an advanced correlation method that assumes and predicts what an attacker can do next after the attack by studying the statistics and probability and uses only two variables?

• A.Vulnerability-Based Approach
• B.Rule-Based Approach
• C.Route Correlation
• D.Bayesian Correlation

Comment: *

Name: *

Email: *

Verification: *

As a part of the investigation, Caroline, a forensic expert, was assigned the task to examine the transaction logs pertaining to a database named Transfers. She used SQL Server Management Studio to collect the active transaction log files of the database. Caroline wants to extract detailed information on the logs, including AllocUnitId, page id, slot id, etc. Which of the following commands does she need to execute in order to extract the desired information?

• A.DBCC LOG(Transfers, 1)
• B.DBCC LOG(Transfers, 2)
• C.DBCC LOG(Transfers, 0)
• D.DBCC LOG(Transfers, 3)

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements is true regarding SMTP Server?

• A.SMTP Server breaks the recipient's address into Recipient's name and domain name before passing it to the DNS Server
• B.SMTP Server breaks the recipient's address into Recipient's name and his/her designation before passing it to the DNS Server
• C.SMTP Server breaks the recipient's address into Recipient's name and his/her initial before passing it to the DNS Server
• D.SMTP Server breaks the recipient's address into Recipient's name and recipient's address before passing it to the DNS Server

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a list of recently used programs or opened files?

• A.GUID Partition Table (GPT)
• B.Master File Table (MFT)
• C.Most Recently Used (MRU)
• D.Recently Used Programs (RUP)

Comment: *

Name: *

Email: *

Verification: *