An Expert witness gives an opinion if:

• A.To deter the witness form expanding the scope of his or her investigation beyond the requirements of the case
• B.To define the issues of the case for determination by the finder of fact
• C.To stimulate discussion between the consulting expert and the expert witness
• D.The Opinion, inferences or conclusions depend on special knowledge, skill or training not within the ordinary experience of lay jurors

Comment: *

Name: *

Email: *

Verification: *

What will the following command produce on a website login page?
SELECT email, passwd, login_id, full_name FROM members
WHERE email = '[email protected]';
DROP TABLE members; --'

• A.Retrieves the password for the first user in the members table
• B.This command will not produce anything since the syntax is incorrect
• C.Deletes the entire members table
• D.Inserts the Error! Reference source not found. email address into the members table

Comment: *

Name: *

Email: *

Verification: *

A state department site was recently attacked and all the servers had their disks erased. The incident response team sealed the area and commenced investigation.
During evidence collection they came across a zip disks that did not have the standard labeling on it. The incident team ran the disk on an isolated system and found that the system disk was accidentally erased. They decided to call in the FBI for further investigation. Meanwhile, they short listed possible suspects including three summer interns. Where did the incident team go wrong?

• A.They tampered with evidence by using it
• B.They attempted to implicate personnel without proof
• C.They examined the actual evidence on an unrelated system
• D.They called in the FBI without correlating with the fingerprint data

Comment: *

Name: *

Email: *

Verification: *

Your company's network just finished going through a SAS 70 audit. This audit reported that overall, your network is secure, but there are some areas that needs improvement. The major area was SNMP security. The audit company recommended turning off SNMP, but that is not an option since you have so many remote nodes to keep track of. What step could you take to help secure SNMP on your network?

• A.Change the default community string names
• B.Block access to UDP port 171
• C.Block all internal MAC address from using SNMP
• D.Block access to TCP port 171

Comment: *

Name: *

Email: *

Verification: *

What is the investigator trying to analyze if the system gives the following image as output?

• A.All the logon sessions
• B.Currently active logon sessions
• C.Inactive logon sessions
• D.Details of users who can logon

Comment: *

Name: *

Email: *

Verification: *