CFA-001無料問題集「GAQM Certified Forensic Analyst (CFA)」

質問 1

Email archiving is a systematic approach to save and protect the data contained in emails so that it can be accessed fast at a later date. There are two main archive types, namely Local Archive and Server Storage Archive. Which of the following statements is correct while dealing with local archives?

（A）Local archives should be stored together with the server storage archives in order to be admissible in a court of law

（B）Local archives do not have evidentiary value as the email client may alter the message data

（C）Server storage archives are the server information and settings stored on a local system whereas the local archives are the local email client information stored on the mail server

（D）It is difficult to deal with the webmail as there is no offline archive in most cases. So consult your counsel on the case as to the best way to approach and gain access to the required data on servers

正解：D 解答を投票する

質問 2

Dumpster Diving refers to:

（A）Creating a set of dictionary words and names, and trying all the possible combinations to crack the password

（B）Convincing people to reveal the confidential information

（C）Looking at either the user,s keyboard or screen while he/she is logging in

（D）Searching for sensitive information in the user,s trash bins and printer trash bins, and searching the user,s desk for sticky notes

正解：D 解答を投票する

質問 3

Physical security recommendations: There should be only one entrance to a forensics lab

（A）False

（B）True

正解：B 解答を投票する

質問 4

Data acquisition system is a combination of tools or processes used to gather, analyze and record Information about some phenomenon. Different data acquisition system are used depends on the location, speed, cost. etc. Serial communication data acquisition system is used when the actual location of the data is at some distance from the computer. Which of the following communication standard is used in serial communication data acquisition system?

（A）RS422

（B）RS423

（C）RS231

（D）RS232

正解：D 解答を投票する

質問 5

Shortcuts are the files with the extension .Ink that are created and are accessed by the users. These files provide you with information about:

（A）Application logs

（B）Files or network shares

（C）System logs

（D）Running application

正解：B 解答を投票する

質問 6

When the operating system marks cluster as used, but does not allocate them to any file, such clusters are known as ___________.

（A）Lost clusters

（B）Bad clusters

（C）Unused clusters

（D）Empty clusters

正解：A 解答を投票する

質問 7

You have been given the task to investigate web attacks on a Windows-based server.
Which of the following commands will you use to look at which sessions the machine has opened with other systems?

（A）Net use

（B）Net sessions

（C）Net config

（D）Net share

正解：A 解答を投票する

質問 8

Microsoft Security IDs are available in Windows Registry Editor. The path to locate IDs in Windows 7 is:

（A）HKEY_LOCAL_MACHlNE\SOFTWARE\Microsoft\Windows NT\CurrentVersion \NetworkList

（B）HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule

（C）HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Currentversion \ProfileList

（D）HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentsVersion \setup

正解：C 解答を投票する

質問 9

Which of the following attacks allows attacker to acquire access to the communication channels between the victim and server to extract the information?

（A）Man-in-the-middle (MITM) attack

（B）Replay attack

（C）Distributed network attack

（D）Rainbow attack

正解：A 解答を投票する

質問 10

Which of the following standard is based on a legal precedent regarding the admissibility of scientific examinations or experiments in legal cases?

（A）FERPA standard

（B）Schneiderman Standard

（C）Frye Standard

（D）Daubert Standard

正解：C 解答を投票する

CFA-001 無料問題集「GAQM Certified Forensic Analyst (CFA)」

弊社を連絡する

関連リンク

トップ試験