What is kept in the following directory? HKLM\SECURITY\Policy\Secrets

• A.IAS account names and passwords
• B.Service account passwords in plain text
• C.Cached password hashes for the past 20 users
• D.Local store PKI Kerberos certificates

Comment: *

Name: *

Email: *

Verification: *

You are a computer forensics investigator working with local police department and you are called to assist in an investigation of threatening emails. The complainant has printer out 27 email messages from the suspect and gives the printouts to you. You inform her that you will need to examine her computer because you need access to the _________________________ in order to track the emails back to the suspect.

• A.Firewall log
• B.Email Header
• C.Routing Table
• D.Configuration files

Comment: *

Name: *

Email: *

Verification: *

An investigator enters the command sqlcmd -S WIN-CQQMK62867E -e -s"," -E as part of collecting the primary data file and logs from a database. What does the "WIN-CQQMK62867E" represent?

• A.Name of SQL Server
• B.Name of the Database
• C.Operating system of the system
• D.Network credentials of the database

Comment: *

Name: *

Email: *

Verification: *

What type of attack sends spoofed UDP packets (instead of ping packets) with a fake source address to the IP broadcast address of a large network?

• A.Smurf scan
• B.Teardrop
• C.SYN flood
• D.Fraggle

Comment: *

Name: *

Email: *

Verification: *

Analyze the hex representation of mysql-bin.000013 file in the screenshot below. Which of the following will be an inference from this analysis?

• A.A WordPress user has been created with the username bad_guy
• B.A WordPress user has been created with the username anonymous_hacker
• C.A user with username bad_guy has logged into the WordPress web application
• D.An attacker with name anonymous_hacker has replaced a user bad_guy in the WordPress database

Comment: *

Name: *

Email: *

Verification: *