312-49v11 Practice Test

312-49v11 Practice Test practice questions, page 11 of 18, with answer review and explanations.

Question 51

A forensic examiner encounters a computer with a failed OS installation and the master boot record (MBR) or partition sector damaged. Which of the following tools can find and restore files and information in the disk?

  1. NetCat
  2. Helix
  3. R-Studio
  4. Wireshark

Question 52

Assume there is a file named myfile.txt in C: drive that contains hidden data streams. Which of the following commands would you issue to display the contents of a data stream?

  1. echo text > program:source_file
  2. C:\>ECHO text_message > myfile.txt:stream1
  3. C:\MORE < myfile.txt:stream1
  4. myfile.dat:stream1

Question 53

Ronald, a forensic investigator, has been hired by a financial services organization to investigate an attack on their MySQL database server, which is hosted on a Windows machine named WIN-DTRAI83202X. Ronald wants to retrieve information on the changes that have been made to the database. Which of the following files should Ronald examine for this task?

  1. WIN-DTRAI83202X-bin.nnnnnn
  2. WIN-DTRAI83202Xslow.log
  3. relay-log.info
  4. WIN-DTRAI83202Xrelay-bin.index

Question 54

Which OWASP IoT vulnerability talks about security flaws such as lack of firmware validation, lack of secure delivery, and lack of anti-rollback mechanisms on IoT devices?

  1. Insecure default settings
  2. Use of insecure or outdated components
  3. Lack of secure update mechanism
  4. Insecure data transfer and storage

Question 55

Which of the following malware targets Android mobile devices and installs a backdoor that remotely installs applications from an attacker-controlled server?

  1. Unflod
  2. Felix
  3. XcodeGhost
  4. xHelper