You are the network administrator for a small bank in Dallas, Texas. To ensure network security, you enact a security policy that requires all users to have 14 character passwords.
After giving your users 2 weeks notice, you change the Group Policy to force 14 character passwords. A week later you dump the SAM database from the standalone server and run a password-cracking tool against it. Over 99% of the passwords are broken within an hour.
Why were these passwords cracked so Quickly?

• A.Networks using Active Directory never use SAM databases so the SAM database pulled was empty
• B.A password Group Policy change takes at least 3 weeks to completely replicate throughout a network
• C.The passwords that were cracked are local accounts on the Domain Controller
• D.Passwords of 14 characters or less are broken up into two 7-character hashes

Comment: *

Name: *

Email: *

Verification: *

To make sure the evidence you recover and analyze with computer forensics software can be admitted in court, you must test and validate the software. What group is actively providing tools and creating procedures for testing and validating computer forensics software ?

• A.Association of Computer Forensics Software Manufactures (ACFSM)
• B.National Institute of Standards and Technology (NIST)
• C.Computer Forensics Tools and Validation Committee (CFTVC)
• D.Society for Valid Forensics Tools and Testing (SVFTT)

Comment: *

Name: *

Email: *

Verification: *

A master boot record (MBR) is the first sector ("sector zero") of a data storage device. What is the size of MBR?

• A.1048 Bytes
• B.512 Bytes
• C.Depends on the capacity of the storage device
• D.4092 Bytes

Comment: *

Name: *

Email: *

Verification: *

Travis, a computer forensics investigator, is finishing up a case he has been working on for over a month involving copyright infringement and embezzlement. His last task is to prepare an investigative report for the president of the company he has been working for.
Travis must submit a hard copy and an electronic copy to this president. In what electronic format should Travis send this report?

• A.WPD
• B.TIFF-8
• C.DOC
• D.PDF

Comment: *

Name: *

Email: *

Verification: *

You just passed your ECSA exam and are about to start your first consulting job running security audits for a financial institution in Los Angeles. The IT manager of the company you will be working for tries to see if you remember your ECSA class. He asks about the methodology you will be using to test the company's network.
How would you answer?

• A.Microsoft Methodology
• B.Google Methodology
• C.LPT Methodology
• D.IBM Methodology

Comment: *

Name: *

Email: *

Verification: *