Volatile Memory is one of the leading problems for forensics. Worms such as code Red are memory resident and do write themselves to the hard drive, if you turn the system off they disappear. In a lab environment, which of the following options would you suggest as the most appropriate to overcome the problem of capturing volatile memory?

• A.Create a Separate partition of several hundred megabytes and place the swap file there
• B.Give the Operating System a minimal amount of memory, forcing it to use a swap file
• C.Use VMware to be able to capture the data in memory and examine it
• D.Use intrusion forensic techniques to study memory resident infections

Comment: *

Name: *

Email: *

Verification: *

If an attacker's computer sends an IPID of 31400 to a zombie computer on an open port in IDLE scanning, what will be the response?

• A.31402
• B.31401
• C.31399
• D.The zombie will not send a response

Comment: *

Name: *

Email: *

Verification: *

The process of restarting a computer that is already turned on through the operating system is called?

• A.Cold boot
• B.Warm boot
• C.Ice boot
• D.Hot Boot

Comment: *

Name: *

Email: *

Verification: *

What is the size value of a nibble?

• A.0.5 bit
• B.0.5 kilo byte
• C.2 bits
• D.0.5 byte

Comment: *

Name: *

Email: *

Verification: *

You are a security analyst performing reconnaissance on a company you will be carrying out a penetration test for. You conduct a search for IT jobs on Dice.com and find the following information for an open position: 7+ years experience in Windows Server environment 5+ years experience in Exchange 2000/2003 environment Experience with Cisco Pix Firewall, Linksys 1376 router, Oracle 11i and MYOB v3.4 Accounting software are required MCSA desired, MCSE, CEH preferred No Unix/Linux Experience needed What is this information posted on the job website considered?

• A.Information vulnerability
• B.Competitive exploit
• C.Social engineering exploit
• D.Trade secret

Comment: *

Name: *

Email: *

Verification: *