312-49v10 practice questions, page 26 of 34, with answer review and explanations.
Question 126
You are assisting in the investigation of a possible Web Server Hack. The company who called you stated that customers reported to them that whenever they entered the web address of the company in their browser, what they received was a porno graphic web site. The company checked the web server and nothing appears wrong. When you type in the IP address of the web site in your browser everything appears normal. What is the name of the attack that affects the DNS cache of the name resolution servers, resulting in those servers directing users to the wrong web site?
ARP Poisoning
DNS Poisoning
HTTP redirect attack
IP Spoofing
Question 127
Analyze the hex representation of mysql-bin.000013 file in the screenshot below. Which of the following will be an inference from this analysis?
A user with username bad_guy has logged into the WordPress web application
A WordPress user has been created with the username anonymous_hacker
An attacker with name anonymous_hacker has replaced a user bad_guy in the WordPress database
A WordPress user has been created with the username bad_guy
Question 128
Law enforcement officers are conducting a legal search for which a valid warrant was obtained.While conducting the search, officers observe an item of evidence for an unrelated crime that was not included in the warrant. The item was clearly visible to the officers and immediately identified as evidence. What is the term used to describe how this evidence is admissible?
Plain view doctrine
Corpus delicti
Locard Exchange Principle
Ex Parte Order
Question 129
Microsoft Outlook maintains email messages in a proprietary format in what type of file?
.email
.mail
.pst
.doc
Question 130
The efforts to obtain information before a trail by demanding documents, depositions, questioned and answers written under oath, written requests for admissions of fact and examination of the scene is a description of what legal term?