First response to an incident may involve three different groups of people, and each will have differing skills and need to carry out differing tasks based on the incident. Who is responsible for collecting, preserving, and packaging electronic evidence?

• A.Lawyers
• B.Forensic laboratory staff
• C.Local managers or other non-forensic staff
• D.System administrators

Comment: *

Name: *

Email: *

Verification: *

The offset in a hexadecimal code is:

• A.The first byte after the colon
• B.The 0x at the beginning of the code
• C.The last byte after the colon
• D.The 0x at the end of the code

Comment: *

Name: *

Email: *

Verification: *

What does the 63.78.199.4(161) denotes in a Cisco router log?
Mar 14 22:57:53.425 EST: %SEC-6-IPACCESSLOGP: list internet-inbound denied udp 66.56.16.77(1029) -> 63.78.199.4(161), 1 packet

• A.Source IP address
• B.Login IP address
• C.None of the above
• D.Destination IP address

Comment: *

Name: *

Email: *

Verification: *

Self-Monitoring, Analysis, and Reporting Technology (SMART) is built into the hard drives to monitor and report system activity. Which of the following is included in the report generated by SMART?

• A.All the states (running and discontinued) associated with the OS
• B.List of running processes
• C.Power Off time
• D.Logs of high temperatures the drive has reached

Comment: *

Name: *

Email: *

Verification: *

In Steganalysis, which of the following describes a Known-stego attack?

• A.During the communication process, active attackers can change cover
• B.Only the steganography medium is available for analysis
• C.The hidden message and the corresponding stego-image are known
• D.Original and stego-object are available and the steganography algorithm is known

Comment: *

Name: *

Email: *

Verification: *