312-49v11 Exam Question 226

What technique is used by JPEGs for compression?
  • 312-49v11 Exam Question 227

    Given the drive dimensions as follows and assuming a sector has 512 bytes, what is the capacity of the described hard drive?
    22,164 cylinders/disk
    80 heads/cylinder
    63 sectors/track
  • 312-49v11 Exam Question 228

    Debbie has obtained a warrant to search a known pedophiles house. Debbie went to the house and executed the search warrant to seize digital devices that have been recorded as being used for downloading Illicit Images. She seized all digital devices except a digital camera.
    Why did she not collect the digital camera?
  • 312-49v11 Exam Question 229

    Jim's company regularly performs backups of their critical servers. But the company can't afford to send backup tapes to an off-site vendor for long term storage and archiving. Instead Jim's company keeps the backup tapes in a safe in the office. Jim's company is audited each year, and the results from this year's audit show a risk because backup tapes aren't stored off-site. The Manager of Information Technology has a plan to take the backup tapes home with him and wants to know what two things he can do to secure the backup tapes while in transit?
  • 312-49v11 Exam Question 230

    A forensics investigator is studying the Event ID logs on a domain controller for a corporation, following a suspected security breach. He notices that a domain user account was created, then modified, and then added to a group in a very short span of time. The investigator realizes that he must cross-verify the audit policies on the local system to understand if any changes were made to it. Assuming that the investigator has the correct audit policy settings, which of the following Event IDs should he focus on?