최신EC-COUNCIL EC-Council Digital Forensics Essentials (DFE) - 112-57무료샘플문제
문제1
Bob, a network specialist in an organization, is attempting to identify malicious activities in the network. In this process, Bob analyzed specific data that provided him a summary of a conversation between two network devices, including a source IP and source port, a destination IP and destination port, the duration of the conversation, and the information shared during the conversation.
Which of the following types of network-based evidence was collected by Bob in the above scenario?
Bob, a network specialist in an organization, is attempting to identify malicious activities in the network. In this process, Bob analyzed specific data that provided him a summary of a conversation between two network devices, including a source IP and source port, a destination IP and destination port, the duration of the conversation, and the information shared during the conversation.
Which of the following types of network-based evidence was collected by Bob in the above scenario?
정답: A
설명: (ExamPassdump 회원만 볼 수 있음)
문제2
Which of the following network protocols creates secure tunneling through which content obfuscation can be achieved?
Which of the following network protocols creates secure tunneling through which content obfuscation can be achieved?
정답: A
설명: (ExamPassdump 회원만 볼 수 있음)
문제3
A forensic investigator is collecting volatile data such as system information and network information present in the registries, cache, DLLs, and RAM of digital devices through its normal interface.
Identify the data acquisition method the investigator is performing.
A forensic investigator is collecting volatile data such as system information and network information present in the registries, cache, DLLs, and RAM of digital devices through its normal interface.
Identify the data acquisition method the investigator is performing.
정답: C
설명: (ExamPassdump 회원만 볼 수 있음)
문제4
Which of the following layers of the TCP/IP model includes protocols such as Frame Relay, SMDS, Fast Ethernet, SLIP, PPP, FDDI, ATM, Ethernet, and ARP to enable a machine to deliver the desired data to other hosts in the same network?
Which of the following layers of the TCP/IP model includes protocols such as Frame Relay, SMDS, Fast Ethernet, SLIP, PPP, FDDI, ATM, Ethernet, and ARP to enable a machine to deliver the desired data to other hosts in the same network?
정답: A
설명: (ExamPassdump 회원만 볼 수 있음)
문제5
Which of the following file systems is developed by Apple to support Mac OS in its proprietary Macintosh system and replace the Macintosh File System (MFS)?
Which of the following file systems is developed by Apple to support Mac OS in its proprietary Macintosh system and replace the Macintosh File System (MFS)?
정답: B
설명: (ExamPassdump 회원만 볼 수 있음)
문제6
Cheryl, a forensic expert, was recruited to investigate a malicious activity performed by an anonymous hackers' group on an organization's systems. Using an automated tool, Cheryl was able to extract the malware file and analyze the assembly code instructions, which helped him understand the malware's purpose.
Which of the following tools helped Cheryl extract and analyze the assembly code of the malware?
Cheryl, a forensic expert, was recruited to investigate a malicious activity performed by an anonymous hackers' group on an organization's systems. Using an automated tool, Cheryl was able to extract the malware file and analyze the assembly code instructions, which helped him understand the malware's purpose.
Which of the following tools helped Cheryl extract and analyze the assembly code of the malware?
정답: C
설명: (ExamPassdump 회원만 볼 수 있음)
문제7
Which of the following steps in forensic readiness planning provides a backup for future reference and assists in presenting evidence in a court of law?
Which of the following steps in forensic readiness planning provides a backup for future reference and assists in presenting evidence in a court of law?
정답: B
설명: (ExamPassdump 회원만 볼 수 있음)
문제8
Which of the following NTFS system files contains a record of every file present in the system?
Which of the following NTFS system files contains a record of every file present in the system?
정답: D
설명: (ExamPassdump 회원만 볼 수 있음)