Consider that you are investigating a machine running an Windows OS released prior to Windows Vist a. You are trying to gather information about the deleted files by examining the master database file named INFO2 located at C:\Recycler\<USER SID>\. You read an entry named "Dd5.exe". What does Dd5.exe mean?

• A.D drive. fifth file deleted, a .exe file
• B.D drive, fourth file restored, a .exe file
• C.D drive, sixth file deleted, a .exe file
• D.D drive, fourth file deleted, a .exe file

Comment: *

Name: *

Email: *

Verification: *

Which of the following file contains the traces of the applications installed, run, or uninstalled from a system?

• A.Prefetch Files
• B.Image Files
• C.Shortcut Files
• D.Virtual files

Comment: *

Name: *

Email: *

Verification: *

Which of the following acts as a network intrusion detection system as well as network intrusion prevention system?

• A.Snort
• B.Nikto
• C.Kismet
• D.Accunetix

Comment: *

Name: *

Email: *

Verification: *

In Windows Security Event Log, what does an event id of 530 imply?

• A.Logon Failure - Account currently disabled
• B.Logon Failure - Account logon time restriction violation
• C.Logon Failure - Unknown user name or bad password
• D.Logon Failure - User not allowed to logon at this computer

Comment: *

Name: *

Email: *

Verification: *

Lance wants to place a honeypot on his network. Which of the following would be your recommendations?

• A.Use a system that is not directly interacting with the router
• B.It doesn't matter as all replies are faked
• C.Use it on a system in an external DMZ in front of the firewall
• D.Use a system that has a dynamic addressing on the network

Comment: *

Name: *

Email: *

Verification: *