The 1st sector of a hard disk is sometimes called:
A. The boot sector.
B. On hard disks, the first sector is called variously the master boot record, the partition sector, or the partition table.
C. The FAT (File Allocation Table)
D. The partition sector.
正解:D
質問 2:
As a private CIFI investigator, you are not required to conduct your investigations according to the law as you are not an agent of the state.
A. False
B. True
正解:A
質問 3:
The MFT File is a physical file on the disk that:
A. Has a btrieve engine format but is more efficient
B. Is larger than 1mb, but less than 128mb
C. Has a backup located elsewhere on the disk
D. Is not part of the active partition, but resides in the boot sector
正解:C
質問 4:
When introduced to a crime scene as an investigator you need to:
A. Contact the public information officer immediately
B. Maintain a written log
C. Secure the crime scene
D. A, C, & D
E. A, B, & C
F. Use sound forensic processes
正解:D
質問 5:
The following are all keyloggers except:
A. Device Driver Keylogger
B. Keymapping Keylogger
C. API Keyloggers
D. Low Level Keyloggers
正解:B
質問 6:
Which of the following is a challenge for performing a Traceback?
A. All of the above
B. Server Hopping
C. Spoofing
D. Dynamic IP Addresses
正解:A
質問 7:
The Computer Fraud and Abuse Act applies to:
A. Financial fraud at U.S. banking institutions that are governed by the O.T.C
B. The use of computers for internet based fraud (specifically in response to online auction fraud based on U.S. vs. Sherman (2000))
C. Computers used in committing financial fraud on U.S. financial institutions that are physically located outside the U.S.
D. Use of government computer systems to defraud the public trust.
正解:C
質問 8:
What IP Traceback technique's basic idea is to have routers label a subset of transit packets with information about the router labeling router, thus enabling the receiver to reconstruct the path back to the source?
A. Ingress Filtering
B. PPM
C. ITRACE
D. SPIE
正解:B
質問 9:
There are two types of evidence: what are they?
A. Admissible and Inadmissible
B. Real and Assumed
C. There are more than two types
D. Physical and Testimonial
正解:D
Kawano -
II0-001豊富な例題と確認問題で実力UP!