Online Access Free II0-001 Exam Questions

When handling evidence, which of the following is not a common guideline?

• A.Remove all suspects away from the computer crime scene.
• B.One must have legal authority to seize and collect the evidence.
• C.Contact your local law enforcement immediately
• D.Document the crime scene.

The following are components of an IP Datagram header except:

• A.Type of Service
• B.Total Length
• C.Default Gateway address
• D.Header Checksum

The Best Evidence Rule is

• A.Great to look at
• B.Always collect the best evidence
• C.Evidence that can't be seen
• D.Requires that the content of a writing be proven by introducing the original or by testimony of a qualified individual assuring its validity.

Steganography is:

• A.Linguistics for code breaking
• B.Courtroom reporting of testimony
• C.The study of the Steganpaeolic Era
• D.Hiding information in plain view

An event is considered an incident when it meets or exceed which standard?

• A.ISO7799
• B.None of the above
• C.BS7799
• D.ISO17799