Question 1

Which of the following MUST be done before a digital forensics investigator may acquire digital evidence?

Options :

A : Inventory the digital evidence.

B : Isolate the digital evidence.

C : Verify that the investigator has the appropriate legal authority to proceed.

D : Perform hashing to verify the integrity of the digital evidence.

Answer: C

Question 2

Which of the following actions should be taken by a security professional when a mission critical computer network attack is suspected?

Options :

A : Isolate the network, log an independent report, fix the problem, and redeploy the computer.

B : Isolate the network, install patches, and report the occurrence.

C : Prioritize, report, and investigate the occurrence.

D : Turn the rooter off, perform forensic analysis, apply the appropriate fin, and log incidents.

Answer: C

Question 3

Which of the following is the BEST technique to facilitate secure software development?

Options :

A : Adhere to secure coding practices for the software application under development.

B : Conduct penetrating testing for the software application under development.

C : Develop a threat modeling review for the software application under development.

D : Perform a code review process for the software application under development.

Answer: A

Question 4

At which layer of the Open Systems Interconnect (OSI) model are the source and destination address for a datagram handled?

Options :

A : Transport Layer

B : Data-Link Layer

C : Network Layer

D : Application Layer

Answer: C

Question 5

After a breach incident, investigators narrowed the attack to a specific network administrator's credentials. However, there was no evidence to determine how the hackers obtained the credentials. Much of the following actions could have BEST avoided the above breach per the investigation described above?

Options :

A : A periodic review of network access loos

B : A periodic review of active users en the network

C : A periodic review of all privileged accounts actions

D : A periodic review of password strength of all users across the organization

Answer: C