312-49v11 Practice Test

312-49v11 Practice Test practice questions, page 10 of 18, with answer review and explanations.

Question 46

What does Locard's Exchange Principle state?

  1. Any information of probative value that is either stored or transmitted in a digital form
  2. Digital evidence must have some characteristics to be disclosed in the court of law
  3. Anyone or anything, entering a crime scene takes something of the scene with them, and leaves something of themselves behind when they leave
  4. Forensic investigators face many challenges during forensics investigation of a digital crime, such as extracting, preserving, and analyzing the digital evidence

Question 47

You are asked to build a forensic lab and your manager has specifically informed you to use copper for lining the walls, ceilings, and floor. What is the main purpose of lining the walls, ceilings, and floor with copper?

  1. To control the room temperature
  2. To strengthen the walls, ceilings, and floor
  3. To avoid electromagnetic emanations
  4. To make the lab sound proof

Question 48

Which tool allows dumping the contents of process memory without stopping the process?

  1. psdump.exe
  2. pmdump.exe
  3. processdump.exe
  4. pdump.exe

Question 49

William is examining a log entry that reads 192.168.0.1 - - [18/Jan/2020:12:42:29 +0000] "GET / HTTP/1.1" 200 1861. Which of the following logs does the log entry belong to?

  1. The common log format of Apache access log
  2. IIS log
  3. The combined log format of Apache access log
  4. Apache error log

Question 50

In a Filesystem Hierarchy Standard (FHS), which of the following directories contains the binary files required for working?

  1. /mnt
  2. /sbin
  3. /media
  4. /proc