Refer to the following packet capture. 00:00:04.549138 IP omar.cisco.com.34548 > 93.184.216.34.telnet: Flags [S], seq 3152949738, win 29200, options [mss 1460,sackOK,TS val 1193148797 ecr 0,nop,wscale 7], length 0 00:00:05.547084 IP omar.cisco.com.34548 > 93.184.216.34.telnet: Flags [S],...
Which of the following file systems is more secure, scalable, and advanced?A . FAT32B . FAT64C . uFATD . NTFSView AnswerAnswer: D
Which of the following are not components of the 5-tuple of a flow in NetFlow? (Select all that apply.)A . Source IP addressB . Flow record IDC . GatewayD . Source portE . Destination...
You see 100 HTTP GET and POST requests for various pages on one of your webservers. The user agent in the requests contain php code that, if executed, creates and writes to a new...
Which statement about the collected evidence data when performing digital forensics is true?A . it must be preserved and its integrity verified.B . It must be copied to external storage media and immediately distributed...
Which statement about collecting data evidence when performing digital forensics is true?A . Allowing unrestricted access to impacted devicesB . Not allowing items of evidence to be physically touchC . Powering off the device...
Which of the following is not true about listening ports?A . A listening port is a port held open by a running application in order to accept inbound connections.B . Seeing traffic from a...
Which option filters a LibPCAP capture that used a host as a gateway?A . tcp|udp] [src|dst] port <port>B . [src|dst] net <net> [{mask <mask>}|{len <len>}]C . ether [src|dst] host <ehost>D . gateway host <host>View...
During which phase of the forensic process is data that is related to a specific event labeled and recorded to preserve its integrity?A . collectionB . examinationC . reportingD . investigationView AnswerAnswer: A
Which option is a misuse variety per VERIS enumerations?A . snoopingB . hackingC . theftD . assaultView AnswerAnswer: B
