Online Access Free 312-49v10 Exam Questions

When marking evidence that has been collected with the aa/ddmmyy/nnnn/zz format, what does the nnn denote?

• A.The initials of the forensics analyst
• B.The sequential number of the exhibits seized
• C.The sequence number for the parts of the same exhibit
• D.The year the evidence was taken

Which Intrusion Detection System (IDS) usually produces the most false alarms due to the unpredictable behaviors of users and networks?

• A.signature recognition
• B.host-based IDS systems (HIDS)
• C.network-based IDS systems (NIDS)
• D.anomaly detection

Select the tool appropriate for examining the dynamically linked libraries of an application or malware.

• A.DependencyWalker
• B.ResourcesExtract
• C.SysAnalyzer
• D.PEiD

How many characters long is the fixed-length MD5 algorithm checksum of a critical system file?

• A.16
• B.128
• C.64
• D.32

What happens lo the header of the file once It Is deleted from the Windows OS file systems?

• A.The OS replaces the second letter of a deleted file name with a hex byte code: Eh5
• B.The OS replaces the first letter of a deleted file name with a hex byte code: E5h
• C.The hex byte coding of the file remains the same, but the file location differs
• D.The OS replaces the entire hex byte coding of the file.