Question 1

According to the forensics investigation process, what is the next step carried out right after collecting the

evidence?

Options :

A : Create a Chain of Custody Document

B : Send it to the nearby police station

C : Set a Forensic lab

D : Call Organizational Disciplinary Team

Answer: A

Question 2

Which of the following data source can be used to detect the traffic associated with Bad Bot User-Agents?

Options :

A : Windows Event Log

B : Web Server Logs

C : Router Logs

D : Switch Logs

Answer: B

Question 3

Rinni, SOC analyst, while monitoring IDS logs detected events shown in the figure below

What does this event log indicate?

Options :

A : Directory Traversal Attack

B : XSS Attack

C : SQL Injection Attack

D : Parameter Tampering Attack

Answer: D

Question 4

Jony, a security analyst, while monitoring IIS logs, identified events shown in the figure below

What does this event log indicate?

Options :

A : Parameter Tampering Attack

B : XSS Attack

C : Directory Traversal Attack

D : SQL Injection Attack

Answer: A

Question 5

Which of the following command is used to view iptables logs on Ubuntu and Debian distributions?

Options :

A : $ tailf /var/log/sys/kern.log

B : $ tailf /var/log/kern.log

C : # tailf /var/log/messages

D : # tailf /var/log/sys/messages

Answer: B