In the process of gathering evidence from a computer attack, a system administrator took a series of actions which are listed below. Can you identify which one of these actions has compromised the whole evidence collection process?

• A.Using a write blocker
• B.Made a full-disk image
• C.Created a message digest for log files
• D.Displayed the contents of a folder

Comment: *

Name: *

Email: *

Verification: *

Controls are implemented to:

• A.eliminate risk and reduce the potential for loss
• B.mitigate risk and eliminate the potential for loss
• C.mitigate risk and reduce the potential for loss
• D.eliminate risk and eliminate the potential for loss

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be an example of the best password?

• A.golf001
• B.Elizabeth
• C.T1me4g0lF
• D.password

Comment: *

Name: *

Email: *

Verification: *

BIND should be disabled on which of the following?

• A.Routers
• B.Firewalls
• C.All non DNS servers
• D.All DNS servers to avoid recursive lookups

Comment: *

Name: *

Email: *

Verification: *

What does "System Integrity" mean?

• A.The software of the system has been implemented as designed.
• B.Users can't tamper with processes they do not own.
• C.Hardware and firmware have undergone periodic testing to verify that they are functioning properly.
• D.Design specifications have been verified against the formal top-level specification.

Comment: *

Name: *

Email: *

Verification: *