You are assigned to work in the computer forensics lab of a state police agency. While working on a high profile criminal case, you have followed every applicable procedure, however your boss is still concerned that the defense attorney might question whether evidence has been changed while at the lab. What can you do to prove that the evidence is the same as it was when it first entered the lab?

• A.sign a statement attesting that the evidence is the same as it was when it entered the lab
• B.make an MD5 hash of the evidence and compare it with the original MD5 hash that was taken when the evidence first entered the lab
• C.there is no reason to worry about this possible claim because state labs are certified
• D.make an MD5 hash of the evidence and compare it to the standard database developed by NIST

Comment: *

Name: *

Email: *

Verification: *

Jessica works as systems administrator for a large electronics firm. She wants to scan her network quickly to detect live hosts by using ICMP ECHO Requests. What type of scan is Jessica going to perform?

• A.ICMP ping sweep
• B.Smurf scan
• C.Ping trace
• D.Tracert

Comment: *

Name: *

Email: *

Verification: *

Which of the following files contains the traces of the applications installed, run, or uninstalled from a system?

• A.Prefetch Files
• B.Image Files
• C.Shortcut Files
• D.Virtual Files

Comment: *

Name: *

Email: *

Verification: *

Which of the following files store the MySQL database data permanently, including the data that had been deleted, helping the forensic investigator in examining the case and finding the culprit?

• A.iblog
• B.mysql-bin
• C.mysql-log
• D.ibdata1

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a list of recently used programs or opened files?

• A.GUID Partition Table (GPT)
• B.Recently Used Programs (RUP)
• C.Master File Table (MFT)
• D.Most Recently Used (MRU)

Comment: *

Name: *

Email: *

Verification: *