Jack Smith is a forensics investigator who works for Mason Computer Investigation
Services. He is investigating a computer that was infected by Ramen Virus.

He runs the netstat command on the machine to see its current connections. In the following screenshot, what do the 0.0.0.0 IP addresses signify?

• A.Those connections are in closed/waiting mode
• B.Those connections are established
• C.Those connections are in listening mode
• D.Those connections are in timed out/waiting mode

Comment: *

Name: *

Email: *

Verification: *

Sectors are pie-shaped regions on a hard disk that store data. Which of the following parts of a hard disk do not contribute in determining the addresses of data?

• A.Heads
• B.Cylinder
• C.Sectors
• D.Interface

Comment: *

Name: *

Email: *

Verification: *

If the partition size Is 4 GB, each cluster will be 32 K.
Even If a file needs only 10 K, the entire 32 K will be allocated, resulting In 22 K of ___________.

• A.Slack space
• B.Deleted space
• C.Sector space
• D.Cluster space

Comment: *

Name: *

Email: *

Verification: *

What technique is used by JPEGs for compression?

• A.DCT
• B.TIFF-8
• C.ZIP
• D.TCD

Comment: *

Name: *

Email: *

Verification: *

Which of the following is NOT a part of pre-investigation phase?

• A.Creating an investigation team
• B.Gathering evidence data
• C.Gathering information about the incident
• D.Building forensics workstation

Comment: *

Name: *

Email: *

Verification: *