Which tool allows dumping the contents of process memory without stopping the process?

• A.psdump.exe
• B.pdump.exe
• C.processdump.exe
• D.pmdump.exe

Comment: *

Name: *

Email: *

Verification: *

What must be obtained before an investigation is carried out at a location?

• A.Modus operandi
• B.Search warrant
• C.Habeas corpus
• D.Subpoena

Comment: *

Name: *

Email: *

Verification: *

You are working for a local police department that services a population of 1,000,000 people and you have been given the task of building a computer forensics lab. How many law-enforcement computer investigators should you request to staff the lab?

• A.8
• B.4
• C.2
• D.1

Comment: *

Name: *

Email: *

Verification: *

What is a first sector ("sector zero") of a hard disk?

• A.Hard disk boot record
• B.Master boot record
• C.System boot record
• D.Secondary boot record

Comment: *

Name: *

Email: *

Verification: *

Terri works for a security consulting firm that is currently performing a penetration test on
First National Bank in Tokyo. Terri's duties include bypassing firewalls and switches to gain access to the network. Terri sends an IP packet to one of the company's switches with
ACK bit and the source address of her machine set. What is Terri trying to accomplish by sending this IP packet?

• A.Enable tunneling feature on the switch
• B.Crash the switch with aDoS attack since switches cannot send ACK bits
• C.Poison the switch's MAC address table by flooding it with ACK bits
• D.Trick the switch into thinking it already has a session with Terri's computer

Comment: *

Name: *

Email: *

Verification: *