Which one of the following is the correct flow for Setting Up a Computer Forensics Lab?

• A.Planning and budgeting -> Physical location and structural design considerations-> Forensics lab licensing -> Human resource considerations -> Work area considerations -> Physical security recommendations
• B.Planning and budgeting -> Physical location and structural design considerations -> Forensics lab licensing ->Work area considerations -> Human resource considerations -> Physical security recommendations
• C.Planning and budgeting -> Physical location and structural design considerations -> Work area considerations -> Human resource considerations -> Physical security recommendations -> Forensics lab licensing
• D.Planning and budgeting -> Forensics lab licensing -> Physical location and structural design considerations -> Work area considerations -> Physical security recommendations -> Human resource considerations

Comment: *

Name: *

Email: *

Verification: *

Jony, a security analyst, while monitoring IIS logs, identified events shown in the figure below.

What does this event log indicate?

• A.Parameter Tampering Attack
• B.XSS Attack
• C.Directory Traversal Attack
• D.SQL Injection Attack

Correct Answer: D

Comment: *

Name: *

Email: *

Verification: *

Identify the attack when an attacker by several trial and error can read the contents of a password file present in the restricted etc folder just by manipulating the URL in the browser as shown:
http://www.terabytes.com/process.php./../../../../etc/passwd

• A.Directory Traversal Attack
• B.SQL Injection Attack
• C.Form Tampering Attack
• D.Denial-of-Service Attack

Comment: *

Name: *

Email: *

Verification: *

An attacker exploits the logic validation mechanisms of an e-commerce website. He successfully purchases a product worth $100 for $10 by modifying the URL exchanged between the client and the server.
Original
URL: http://www.buyonline.com/product.aspx?profile=12
&debit=100
Modified URL: http://www.buyonline.com/product.aspx?profile=12
&debit=10
Identify the attack depicted in the above scenario.

• A.SQL Injection Attack
• B.Denial-of-Service Attack
• C.Parameter Tampering Attack
• D.Session Fixation Attack

Comment: *

Name: *

Email: *

Verification: *

What is the process of monitoring and capturing all data packets passing through a given network using different tools?

• A.DNS Footprinting
• B.Network Sniffing
• C.Network Scanning
• D.Port Scanning

Comment: *

Name: *

Email: *

Verification: *