312-49v11 Practice Test

312-49v11 Practice Test practice questions, page 3 of 18, with answer review and explanations.

Question 11

An expert witness is a __________________ who is normally appointed by a party to assist the formulation and preparation of a party’s claim or defense.

  1. Expert in criminal investigation
  2. Subject matter specialist
  3. Witness present at the crime scene
  4. Expert law graduate appointed by attorney

Question 12

Smith, a network administrator with a large MNC, was the first to arrive at a suspected crime scene involving criminal use of compromised computers. What should be his first response while maintaining the integrity of evidence?

  1. Record the system state by taking photographs of physical system and the display
  2. Perform data acquisition without disturbing the state of the systems
  3. Open the systems, remove the hard disk and secure it
  4. Switch off the systems and carry them to the laboratory

Question 13

Which among the following is an act passed by the U.S. Congress in 2002 to protect investors from the possibility of fraudulent accounting activities by corporations?

  1. HIPAA
  2. GLBA
  3. SOX
  4. FISMA

Question 14

Jacky encrypts her documents using a password. It is known that she uses her daughter’s year of birth as part of the password. Which password cracking technique would be optimal to crack her password?

  1. Rule-based attack
  2. Brute force attack
  3. Syllable attack
  4. Hybrid attack

Question 15

Which of the following Event Correlation Approach is an advanced correlation method that assumes and predicts what an attacker can do next after the attack by studying the statistics and probability and uses only two variables?

  1. Bayesian Correlation
  2. Vulnerability-Based Approach
  3. Rule-Based Approach
  4. Route Correlation