On an Active Directory network using NTLM authentication, where on the domain controllers are the passwords stored?

• A.Password.conf
• B.AMS
• C.Shadow file
• D.SAM

Comment: *

Name: *

Email: *

Verification: *

What does the 56.58.152.114(445) denote in a Cisco router log?
Jun 19 23:25:46.125 EST: %SEC-4-IPACCESSLOGP: list internet-inbound denied udp 67.124.115.35(8084) -> 56.58.152.114(445), 1 packet

• A.Login IP address
• B.None of the above
• C.Source IP address
• D.Destination IP address

Comment: *

Name: *

Email: *

Verification: *

An investigator has acquired packed software and needed to analyze it for the presence of malice. Which of the following tools can help in finding the packaging software used?

• A.SysAnalyzer
• B.Dependency Walker
• C.PEiD
• D.Comodo Programs Manager

Comment: *

Name: *

Email: *

Verification: *

Why should you never power on a computer that you need to acquire digital evidence from?

• A.Powering on a computer has no affect when needing to acquire digital evidence from it
• B.When the computer boots up, data in the memory buffer is cleared which could destroy evidence
• C.When the computer boots up, files are written to the computer rendering the data nclean
• D.When the computer boots up, the system cache is cleared which could destroy evidence

Comment: *

Name: *

Email: *

Verification: *

A forensics investigator is searching the hard drive of a computer for files that were recently moved to the Recycle Bin. He searches for files in C:\RECYCLED using a command line tool but does not find anything. What is the reason for this?

• A.The files are hidden and he must use switch to view them
• B.The Recycle Bin does not exist on the hard drive
• C.Only FAT system contains RECYCLED folder and not NTFS
• D.He should search in C:\Windows\System32\RECYCLED folder

Comment: *

Name: *

Email: *

Verification: *