Question 103

- (Topic 2)
When making the preliminary investigations in a sexual harassment case, how many investigators are you recommended having?

Correct Answer:B

Question 104

- (Topic 1)
Which of the following attacks allows an attacker to access restricted directories, including application source code, configuration and critical system files, and to execute commands outside of the web server's root directory?

Correct Answer:C

Question 105

- (Topic 1)
A forensic investigator is a person who handles the complete Investigation process, that is, the preservation, identification, extraction, and documentation of the evidence. The investigator has many roles and responsibilities relating to the cybercrime analysis. The role of the forensic investigator is to:

Correct Answer:C

Question 106

- (Topic 3)
You are working for a large clothing manufacturer as a computer forensics investigator and are called in to investigate an unusual case of an employee possibly stealing clothing designs from the company and selling them under a different brand name for a different company. What you discover during the course of the investigation is that the clothing designs are actually original products of the employee and the company has no policy against an employee selling his own designs on his own time. The only thing that you can find that the employee is doing wrong is that his clothing design incorporates the same graphic symbol as that of the company with only the wording in the graphic being different. What area of the law is the employee violating?

Correct Answer:C

Question 107

- (Topic 3)
Microsoft Outlook maintains email messages in a proprietary format in what type of file?

Correct Answer:C

Question 108

- (Topic 3)
What method of computer forensics will allow you to trace all ever-established user accounts on a Windows 2000 server the course of its lifetime?

Correct Answer:D
Not MD5: MD5 checksums are used as integrity checks
User accounts are assigned a unique SID, and the SID are not reused.

START 312-49v9 EXAM