- (Topic 2)
If a PDA is seized in an investigation while the device is turned on, what would be the proper procedure?
Correct Answer:A
- (Topic 1)
Raw data acquisition format creates ____ of a data set or suspect drive.
Correct Answer:A
- (Topic 1)
First response to an incident may involve three different groups of people, and each will have differing skills and need to carry out differing tasks based on the incident. Who is responsible for collecting, preserving, and packaging electronic evidence?
Correct Answer:C
- (Topic 3)
You are the network administrator for a small bank in Dallas, Texas. To ensure network security, you enact a security policy that requires all users to have 14 character passwords. After giving your users 2 weeks notice, you change the Group Policy to force 14 character passwords. A week later you dump the SAM database from the standalone server and run a password-cracking tool against it. Over 99% of the passwords are broken within an hour.
Why were these passwords cracked so Quickly?
Correct Answer:A
- (Topic 3)
Diskcopy is:
Correct Answer:B
diskcopy is a STANDARD DOS utility. C:\WINDOWS>diskcopy /? Copies the contents of one floppy disk to another.