Which of the following is the FIRST step taken to maintain the chain of custody in a forensic investigation?A . Security and evaluating the electronic crime scene.B . Transporting the evidence to the forensics...
A network security analyst has noticed a flood of Simple Mail Transfer Protocol (SMTP) traffic to internal clients. SMTP traffic should only be allowed to email servers. Which of the following commands would stop...
A secretary receives an email from a friend with a picture of a kitten in it. The secretary forwards it to the ~COMPANYWIDE mailing list and, shortly thereafter, users across the company receive the...
Which of the following security best practices should a web developer reference when developing a new web-based application?A . Control Objectives for Information and Related Technology (COBIT)B . Risk Management Framework (RMF)C . World...
While planning a vulnerability assessment on a computer network, which of the following is essential? (Choose two.)A . Identifying exposuresB . Identifying critical assetsC . Establishing scopeD . Running scanning toolsE . Installing antivirus...
An automatic vulnerability scan has been performed. Which is the next step of the vulnerability assessment process?A . Hardening the infrastructureB . Documenting exceptionsC . Assessing identified exposuresD . Generating reportsView AnswerAnswer: D Explanation:...
During which phase of a vulnerability assessment would a security consultant need to document a requirement to retain a legacy device that is no longer supported and cannot be taken offline?A . Conducting post-assessment...
A system administrator identifies unusual network traffic from outside the local network. Which of the following is the BEST method for mitigating the threat?A . Malware scanningB . Port blockingC . Packet capturingD ....
Which of the following is susceptible to a cache poisoning attack?A . Domain Name System (DNS)B . Secure Shell (SSH)C . Hypertext Transfer Protocol Secure (HTTPS)D . Hypertext Transfer Protocol (HTTP)View AnswerAnswer: A Explanation:...
After imaging a disk as part of an investigation, a forensics analyst wants to hash the image using a tool that supports piecewise hashing. Which of the following tools should the analyst use?A ....
