- (Topic 2)
What type of file is represented by a colon (:) with a name following it in the Master File Table (MFT) of an NTFS disk?
Correct Answer:B
- (Topic 1)
Volatile information can be easily modified or lost when the system is shut down or rebooted. It helps to determine a logical timeline of the security incident and the users who would be responsible.
Correct Answer:A
- (Topic 1)
Data files from original evidence should be used for forensics analysis
Correct Answer:B
- (Topic 1)
Which of the following log injection attacks uses white space padding to create unusual log entries?
Correct Answer:A
- (Topic 1)
Which of the following reports are delivered under oath to a board of directors/managers/panel of jury?
Correct Answer:B