- (Topic 3)
In a virtual test environment, Michael is testing the strength and security of BGP using multiple routers to mimic the backbone of the Internet. This project will help him write his doctoral thesis on "bringing down the Internet". Without sniffing the traffic between the routers, Michael sends millions of RESET packets to the routers in an attempt to shut one or all of them down. After a few hours, one of the routers finally shuts itself down. What will the other routers communicate between themselves?

1. A. The change in the routing fabric to bypass the affected router
2. B. More RESET packets to the affected router to get it to power back up
3. C. STOP packets to all other routers warning of where the attack originated
4. D. RESTART packets to the affected router to get it to power back up

Correct Answer: A

- (Topic 1)
Which one of the following statements is not correct while preparing for testimony?

1. A. Go through the documentation thoroughly
2. B. Do not determine the basic facts of the case before beginning and examining the evidence
3. C. Establish early communication with the attorney
4. D. Substantiate the findings with documentation and by collaborating with other computer forensics professionals

Correct Answer: B

- (Topic 2)
To check for POP3 traffic using Ethereal, what port should an investigator search by?

1. A. 143
2. B. 25
3. C. 110
4. D. 125

Correct Answer: C

- (Topic 2)
When investigating a network that uses DHCP to assign IP addresses, where would you look to determine which system (MAC address) had a specific IP address at a specific time?

1. A. On the individual computer ARP cacheOn the individual computer? ARP cache
2. B. In the Web Server log files
3. C. In the DHCP Server log files
4. D. There is no way to determine the specific IP address

Correct Answer: C

- (Topic 1)
Which root folder (hive) of registry editor contains a vast array of configuration information for the system, including hardware settings and software settings?

1. A. HKEY_USERS
2. B. HKEY_CURRENT_USER
3. C. HKEY_LOCAL_MACHINE
4. D. HKEY-CURRENT_CONFIG

Correct Answer: C