312-49v10 Practice Questions

Where is the default location for Apache access logs on a Linux computer?

Using Linux to carry out a forensics investigation, what would the following command accomplish?

dd if=/usr/home/partition.image of=/dev/sdb2 bs=4096 conv=notrunc,noerror

Tyler is setting up a wireless network for his business that he runs out of his home. He has followed all the directions from the ISP as well as the wireless router manual. He does not have any encryption set and the SSID is being broadcast. On his laptop, he can pick up the wireless signal for short periods of time, but then the connection drops and the signal goes away.

Eventually the wireless signal shows back up, but drops intermittently. What could be Tyler issue with his home wireless network?

In the following directory listing,

Which file should be used to restore archived email messages for someone using Microsoft Outlook?

Which file is a sequence of bytes organized into blocks understandable by the system’s linker?

What stage of the incident handling process involves reporting events?

Which among the following is an act passed by the U.S. Congress in 2002 to protect investors from the possibility of fraudulent accounting activities by corporations?

A picture file is recovered from a computer under investigation. During the investigation process, the file is enlarged 500% to get a better view of its contents. The picture quality is not degraded at all from this process. What kind of picture is this file. What kind of picture is this file?

Which of the following acts as a network intrusion detection system as well as network intrusion prevention system?

You should make at least how many bit-stream copies of a suspect drive?