Question 1

A law enforcement officer may only search for and seize criminal evidence with _______________________,

which are facts or circumstances that would lead a reasonable person to believe a crime has been committed or

is about to be committed, evidence of the specific crime exists and the evidence of the specific crime exists at

the place to be searched.

Options :

A :

Mere Suspicion

B :

A preponderance of the evidence

C :

Probable cause

D :

Beyond a reasonable doubt

Answer: C

Question 2

Why should you never power on a computer that you need to acquire digital evidence from?

Options :

A :

When the computer boots up, files are written to the computer rendering the data nclean

B :

When the computer boots up, the system cache is cleared which could destroy evidence

C :

When the computer boots up, data in the memory buffer is cleared which could destroy evidence

D :

Powering on a computer has no affect when needing to acquire digital evidence from it

Answer: A

Question 3

You are running known exploits against your network to test for possible vulnerabilities. To test the strength

of your virus software, you load a test network to mimic your production network. Your software successfully

blocks some simple macro and encrypted viruses. You decide to really test the software by using virus code

where the code rewrites itself entirely and the signatures change from child to child, but the functionality stays

the same. What type of virus is this that you are testing?

Options :

A : Polymorphic

B : Metamorphic

C : Oligomorhic

D : Transmorphic

Answer: B

Question 4

If you plan to startup a suspect's computer, you must modify the ___________ to ensure that you do not contaminate or alter data on the suspect's hard drive by booting to the hard drive.

Options :

A : deltree command

B : CMOS

C : Boot.sys

D : Scandisk utility

Answer: C

Question 5

What does the 56.58.152.114(445) denote in a Cisco router log?

Jun 19 23:25:46.125 EST: %SEC-4-IPACCESSLOGP: list internet-inbound denied udp 67.124.115.35(8084)

-> 56.58.152.114(445), 1 packet

Options :

A : Source IP address

B : None of the above

C : Login IP address

D : Destination IP address

Answer: D

Smartly Prepare Exam with Free Online 312-49v9 Practice Test

Buying Options: