312-49v10 practice questions, page 10 of 34, with answer review and explanations.
Question 46
From the following spam mail header, identify the host IP that sent this spam?From [email protected] [email protected] Tue Nov 27 17:27:11 2001Received: from viruswall.ie.cuhk.edu.hk (viruswall [137.189.96.52]) by eng.ie.cuhk.edu.hk(8.11.6/8.11.6) with ESMTP idfAR9RAP23061 for ; Tue, 27 Nov 2001 17:27:10 +0800 (HKT)Received: from mydomain.com (pcd249020.netvigator.com [203.218.39.20]) by viruswall.ie.cuhk.edu.hk (8.12.1/8.12.1) with SMTP id fAR9QXwZ018431 for ; Tue, 27 Nov 2001 17:26:36 +0800 (HKT)Message-Id: >[email protected]From: "china hotel web"To: "Shlam"Subject: SHANGHAI (HILTON HOTEL) PACKAGEDate: Tue, 27 Nov 2001 17:25:58 +0800 MIME-Version: 1.0X-Priority: 3 X-MSMail-Priority: Normal -Reply-To: "china hotel web"
137.189.96.52
8.12.1.0
203.218.39.20
203.218.39.50
Question 47
If you plan to startup a suspect's computer, you must modify the ___________ to ensure that you do not contaminate or alter data on the suspect's hard drive by booting to the hard drive.
deltree command
CMOS
Boot.sys
Scandisk utility
Question 48
You are working for a local police department that services a population of 1,000,000 people and you have been given the task of building a computer forensics lab. How many law-enforcement computer investigators should you request to staff the lab?
8
1
4
2
Question 49
When obtaining a warrant, it is important to:
particularlydescribe the place to be searched and particularly describe the items to be seized
generallydescribe the place to be searched and particularly describe the items to be seized
generallydescribe the place to be searched and generally describe the items to be seized
particularlydescribe the place to be searched and generally describe the items to be seized