Free 312-49v9 Exam Dumps

Question 111

- (Topic 3)
What does the superblock in Linux define?

A. file synames
B. disk geometr
C. location of the first inode
D. available space

Correct Answer:C

Question 112

- (Topic 2)
When performing a forensics analysis, what device is used to prevent the system from recording data on an evidence disk?

A. Write-blocker
B. Protocol analyzer
C. Firewall
D. Disk editor

Correct Answer:A

Question 113

- (Topic 3)
Why are Linux/Unix based computers better to use than Windows computers for idle scanning?

A. Windows computers will not respond to idle scans
B. Linux/Unix computers are easier to compromise
C. Windows computers are constantly talking
D. Linux/Unix computers are constantly talking

Correct Answer:C

Question 114

- (Topic 1)
What is static executable file analysis?

A. It is a process that consists of collecting information about and from an executable file without actually launching the file under any circumstances
B. It is a process that consists of collecting information about and from an executable file by launching the file under any circumstances
C. It is a process that consists of collecting information about and from an executable file without actually launching an executable file in a controlled and monitored environment
D. It is a process that consists of collecting information about and from an executable file by launching an executable filein a controlled and monitored environment

Correct Answer:A

Question 115

- (Topic 2)
An on-site incident response team is called to investigate an alleged case of computer tampering within their company. Before proceeding with the investigation, the CEO informs them that the incident will be classified as ow level? How long will the team have to
respond to the incident?the investigation, the CEO informs them that the incident will be classified as ?ow level? How long will the team have to respond to the incident?

A. One working day
B. Two working days
C. Immediately
D. Four hours

Correct Answer:A