What is the purpose of using Obfuscator in malware?

• A.Propagate malware to other connected devices
• B.Execute malicious code in the system
• C.Avoid encryption while passing through a VPN
• D.Avoid detection by security mechanisms

Comment: *

Name: *

Email: *

Verification: *

BMP (Bitmap) is a standard file format for computers running the Windows operating system. BMP images can range from black and white (1 bit per pixel) up to 24 bit color
(16.7 million colors). Each bitmap file contains header, the RGBQUAD array, information header, and image data. Which of the following element specifies the dimensions, compression type, and color format for the bitmap?

• A.The RGBQUAD array
• B.Information header
• C.Image data
• D.Header

Comment: *

Name: *

Email: *

Verification: *

Which of the following files stores information about local Dropbox installation and account, email IDs linked with the account, current version/build for the local application, the host_id, and local path information?

• A.filecache.db
• B.sigstore.db
• C.host.db
• D.config.db

Comment: *

Name: *

Email: *

Verification: *

After suspecting a change in MS-Exchange Server storage archive, the investigator has analyzed it. Which of the following components is not an actual part of the archive?

• A.PUB.STM
• B.PUB.EDB
• C.PRIV.STM
• D.PRIV.EDB

Comment: *

Name: *

Email: *

Verification: *

Volatile Memory is one of the leading problems for forensics.
Worms such as code Red are memory resident and do not write themselves to the hard drive, if you turn the system off they disappear.
In a lab environment, which of the following options would you suggest as the most appropriate to overcome the problem of capturing volatile memory?

• A.Use intrusion forensic techniques to study memory resident infections
• B.Use Vmware to be able to capture the data in memory and examine it
• C.Create a Separate partition of several hundred megabytes and place the swap file there
• D.Give the Operating System a minimal amount of memory, forcing it to use a swap file

Comment: *

Name: *

Email: *

Verification: *