20:00

PDF|

Guide for CHFI: Computer Hacking Forensics Investigator

Quiz CHFI: Computer Hacking Forensics Investigator

Free Test
/ 10

Quiz

1/10
When an investigator contacts by telephone the domain administrator or controller listed by a Who
is lookup to request all e-mails sent and received for a user account be preserved, what U.S.C. statute
authorizes this phone call and obligates the ISP to preserve e-mail records?
Select the answer
1 correct answer
A.
Title 18, Section 1030
B.
Title 18, Section 2703(d)
C.
Title 18, Section Chapter 90
D.
Title 18, Section 2703(f)

Quiz

2/10
Item 2If you come across a sheepdip machine at your client site, what would you infer?
Select the answer
1 correct answer
A.
A sheepdip coordinates several honeypots
B.
A sheepdip computer is another name for a honeypot
C.
A sheepdip computer is used only for virus-checking.
D.
A sheepdip computer defers a denial of service attack

Quiz

3/10
In a computer forensics investigation, what describes the route that evidence takes from the time
you find it until the case is closed or goes to court?
Select the answer
1 correct answer
A.
rules of evidence
B.
law of probability
C.
chain of custody
D.
policy of separation

Quiz

4/10
How many characters long is the fixed-length MD5 algorithm checksum of a critical system file?
Select the answer
1 correct answer
A.
128
B.
64
C.
32
D.
16

Quiz

5/10
You are working on a thesis for your doctorate degree in Computer Science. Your thesis is based on
HTML, DHTML, and other web-based languages and how they have evolved over the years.
You navigate to archive. org and view the HTML code of news.com. You then navigate to the current
news.com website and copy over the source code. While searching through the code, you come
across something abnormal: What have you found?
Select the answer
1 correct answer
A.
Web bug
B.
CGI code
C.
Trojan.downloader
D.
Blind bug

Quiz

6/10
You are using DriveSpy, a forensic tool and want to copy 150 sectors where the starting sector is 1709
on the primary hard drive. Which of the following formats correctly specifies these sectors?
Select the answer
1 correct answer
A.
0:1000, 150
B.
0:1709, 150
C.
1:1709, 150
D.
0:1709-1858

Quiz

7/10
A honey pot deployed with the IP 172.16.1.108 was compromised by an attacker. Given below is an
excerpt from a Snort binary capture of the attack. Decipher the activity carried out by the attacker by
studying the log. Please note that you are required to infer only what is explicit in the excerpt.
(Note: The student is being tested on concepts learnt during passive OS fingerprinting, basic TCP/IP
connection concepts and the ability to read packet signatures from a sniff dump.)
03/15-20:21:24.107053 211.185.125.124:3500 -> 172.16.1.108:111
TCP TTL:43 TOS:0x0 ID:29726 IpLen:20 DgmLen:52 DF
***A**** Seq: 0x9B6338C5 Ack: 0x5820ADD0 Win: 0x7D78 TcpLen: 32
TCP Options (3) => NOP NOP TS: 23678634 2878772
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=
03/15-20:21:24.452051 211.185.125.124:789 -> 172.16.1.103:111
UDP TTL:43 TOS:0x0 ID:29733 IpLen:20 DgmLen:84
Len: 64
01 0A 8A 0A 00 00 00 00 00 00 00 02 00 01 86 A0 ................
00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 01 86 B8 00 00 00 01 ................
00 00 00 11 00 00 00 00 ........
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=
03/15-20:21:24.730436 211.185.125.124:790 -> 172.16.1.103:32773
UDP TTL:43 TOS:0x0 ID:29781 IpLen:20 DgmLen:1104
Len: 1084
47 F7 9F 63 00 00 00 00 00 00 00 02 00 01 86 B8
Select the answer
1 correct answer
A.
The attacker has conducted a network sweep on port 111
B.
The attacker has scanned and exploited the system using Buffer Overflow
C.
The attacker has used a Trojan on port 32773
D.
The attacker has installed a backdoor

Quiz

8/10
What method would be most efficient for you to acquire digital evidence from this network?
Select the answer
1 correct answer
A.
OS/2
B.
BSD Unix
C.
Linux
D.
Microsoft Windows

Quiz

9/10
Which component in the hard disk moves over the platter to read and write information?
Select the answer
1 correct answer
A.
Actuator
B.
Spindle
C.
Actuator Axis
D.
Head

Quiz

10/10
Before you are called to testify as an expert, what must an attorney do first?
Select the answer
1 correct answer
A.
engage in damage control
B.
prove that the tools you used to conduct your examination are perfect
C.
read your curriculum vitae to the jury
D.
qualify you as an expert witness
Looking for more questions?Buy now

CHFI: Computer Hacking Forensics Investigator Practice test unlocks all online simulator questions

Thank you for choosing the free version of the CHFI: Computer Hacking Forensics Investigator practice test! Further deepen your knowledge on ECCouncil Simulator; by unlocking the full version of our CHFI: Computer Hacking Forensics Investigator Simulator you will be able to take tests with over 701 constantly updated questions and easily pass your exam. 98% of people pass the exam in the first attempt after preparing with our 701 questions.

BUY NOW

What to expect from our CHFI: Computer Hacking Forensics Investigator practice tests and how to prepare for any exam?

The CHFI: Computer Hacking Forensics Investigator Simulator Practice Tests are part of the ECCouncil Database and are the best way to prepare for any CHFI: Computer Hacking Forensics Investigator exam. The CHFI: Computer Hacking Forensics Investigator practice tests consist of 701 questions and are written by experts to help you and prepare you to pass the exam on the first attempt. The CHFI: Computer Hacking Forensics Investigator database includes questions from previous and other exams, which means you will be able to practice simulating past and future questions. Preparation with CHFI: Computer Hacking Forensics Investigator Simulator will also give you an idea of the time it will take to complete each section of the CHFI: Computer Hacking Forensics Investigator practice test . It is important to note that the CHFI: Computer Hacking Forensics Investigator Simulator does not replace the classic CHFI: Computer Hacking Forensics Investigator study guides; however, the Simulator provides valuable insights into what to expect and how much work needs to be done to prepare for the CHFI: Computer Hacking Forensics Investigator exam.

BUY NOW

CHFI: Computer Hacking Forensics Investigator Practice test therefore represents an excellent tool to prepare for the actual exam together with our ECCouncil practice test . Our CHFI: Computer Hacking Forensics Investigator Simulator will help you assess your level of preparation and understand your strengths and weaknesses. Below you can read all the quizzes you will find in our CHFI: Computer Hacking Forensics Investigator Simulator and how our unique CHFI: Computer Hacking Forensics Investigator Database made up of real questions:

Info quiz:

  • Quiz name:CHFI: Computer Hacking Forensics Investigator
  • Total number of questions:701
  • Number of questions for the test:50
  • Pass score:80%

You can prepare for the CHFI: Computer Hacking Forensics Investigator exams with our mobile app. It is very easy to use and even works offline in case of network failure, with all the functions you need to study and practice with our CHFI: Computer Hacking Forensics Investigator Simulator.

Use our Mobile App, available for both Android and iOS devices, with our CHFI: Computer Hacking Forensics Investigator Simulator . You can use it anywhere and always remember that our mobile app is free and available on all stores.

Our Mobile App contains all CHFI: Computer Hacking Forensics Investigator practice tests which consist of 701 questions and also provide study material to pass the final CHFI: Computer Hacking Forensics Investigator exam with guaranteed success. Our CHFI: Computer Hacking Forensics Investigator database contain hundreds of questions and ECCouncil Tests related to CHFI: Computer Hacking Forensics Investigator Exam. This way you can practice anywhere you want, even offline without the internet.

BUY NOW