- (Topic 1)
All the Information about the user activity on the network, like details about login and logoff attempts, is collected in the security log of the computer. When a user's login is successful, successful audits generate an entry whereas unsuccessful audits generate an entry for failed login attempts in the logon event ID table.
In the logon event ID table, which event ID entry (number) represents a successful logging on to a computer?

1. A. 528
2. B. 529
3. C. 530
4. D. 531

Correct Answer: A

- (Topic 1)
The evolution of web services and their increasing use in business offers new attack vectors in an application framework. Web services are based on XML protocols such as web Services Definition Language (WSDL) for describing the connection points, Universal Description, Discovery, and Integration (UDDI) for the description and discovery of Web services and Simple Object Access Protocol (SOAP) for communication between Web services that are vulnerable to various web application threats. Which of the following layer in web services stack is vulnerable to fault code leaks?

1. A. Presentation Layer
2. B. Security Layer
3. C. Discovery Layer
4. D. Access Layer

Correct Answer: C

- (Topic 1)
A computer forensic report is a report which provides detailed information on the complete forensics investigation process.

1. A. True
2. B. False

Correct Answer: A

- (Topic 3)
You are contracted to work as a computer forensics investigator for a regional bank that has four 30 TB storage area networks that store customer data. What method would be most efficient for you to acquire digital evidence from this network?

1. A. Make a bit-stream disk-to-disk file
2. B. Make a bit-stream disk-to-image file
3. C. Create a sparse data copy of a folder or file
4. D. Create a compressed copy of the file with DoubleSpace

Correct Answer: C

- (Topic 3)
Terri works for a security consulting firm that is currently performing a penetration test on First National Bank in Tokyo. Terri's duties include bypassing firewalls and switches to gain access to the network. Terri sends an IP packet to one of the company's switches with ACK bit and the source address of her machine set. What is Terri trying to accomplish by sending this IP packet?

1. A. Poison the switch's MAC address table by flooding it with ACK bits
2. B. Crash the switch with aDoS attack since switches cannot send ACK bits
3. C. Enable tunneling feature on the switch
4. D. Trick the switch into thinking it already has a session with Terri's computer

Correct Answer: D