An on-site incident response team is called to investigate an alleged case of computer tampering within their company. Before proceeding with the investigation, the CEO informs them that the incident will be classified as low level. How long will the team have to respond to the incident?

• A.Two working days
• B.One working day
• C.Four hours
• D.Immediately

Comment: *

Name: *

Email: *

Verification: *

You are running known exploits against your network to test for possible vulnerabilities. To test the strength of your virus software, you load a test network to mimic your production network. Your software successfully blocks some simple macro and encrypted viruses. You decide to really test the software by using virus code where the code rewrites itself entirely and the signatures change from child to child, but the functionality stays the same. What type of virus is this that you are testing?

• A.Metamorphic
• B.Polymorphic
• C.Transmorphic
• D.Oligomorhic

Comment: *

Name: *

Email: *

Verification: *

Simon is a former employee of Trinitron XML Inc. He feels he was wrongly terminated and wants to hack into his former company's network. Since Simon remembers some of the server names, he attempts to run the axfr and ixfr commands using DIG. What is Simon trying to accomplish here?

• A.Enumerate all the users in the domain
• B.Send DOS commands to crash the DNS servers
• C.Perform DNS poisoning
• D.Perform a zone transfer

Comment: *

Name: *

Email: *

Verification: *

What will the following Linux command accomplish?
dd if=/dev/mem of=/home/sam/mem.bin bs=1024

• A.Copy the master boot record to a file
• B.Copy the running memory to a file
• C.Copy the contents of the system folder to a file
• D.Copy the memory dump file to an image file

Comment: *

Name: *

Email: *

Verification: *

In Windows, prefetching is done to improve system performance. There are two types of prefetching: boot prefetching and application prefetching. During boot prefetching, what does the Cache Manager do?

• A.Checks whether the data is processed
• B.Checks hard page faults and soft page faults
• C.Determines the data associated with value EnablePrefetcher
• D.Monitors the first 10 seconds after the process is started

Comment: *

Name: *

Email: *

Verification: *