Question 1

What technique is used by JPEGs for compression?

Options :

A : TIFF-8

B : ZIP

C : DCT

D : TCD

Answer: C

Question 2

What will the following URL produce in an unpatched IIS Web Server?

http://www.thetargetsite.com/scripts/..%

co?../..%co?../windows/system32/cmd.exe?/c+dir+c:\

Options :

A : Directory listing of C: drive on the web server

B : Insert a Trojan horse into the C: drive of the web server

C : Execute a buffer flow in the C: drive of the web server

D : Directory listing of the C:\windows\system32 folder on the web server

Answer: A

Question 3

Edgar is part of the FBI's forensic media and malware analysis team; he Is analyzing a current malware and Is conducting a thorough examination of the suspect system, network, and other connected devices. Edgar's approach Is to execute the malware code to know how It Interacts with the host system and Its Impacts on It. He is also using a virtual machine and a sandbox environment.

What type of malware analysis is Edgar performing?

Options :

A : Malware disassembly

B : VirusTotal analysis

C : Static analysis

D : Dynamic malware analysis/behavioral analysis

Answer: D

Question 4

Which list contains the most recent actions performed by a Windows User?

Options :

A : MRU

B : Activity

C : Recents

D :

Windows Error Log

Answer: A

Question 5

You are working on a thesis for your doctorate degree in Computer Science. Your thesis is based on HTML,

DHTML, and other web-based languages and how they have evolved over the years.

You navigate to archive. org and view the HTML code of news.com. You then navigate to the current

news.com website and copy over the source code. While searching through the code, you come across

something abnormal: What have you found?

Options :

A :

Web bug

B :

CGI code

C :

Trojan.downloader

D :

Blind bug

Answer: A