312-49v8 practice questions, page 4 of 8, with answer review and explanations.
Question 16
Which of the following statements does not support the case assessment?
Review the case investigator's request for service
Identify the legal authority for the forensic examination request
Do not document the chain of custody
Discuss whether other forensic processes need to be performed on the evidence
Question 17
Wireless access control attacks aim to penetrate a network by evading WLAN access control measures, such as AP MAC filters and Wi-Fi port access controls. Which of the following wireless access control attacks allows the attacker to set up a rogue access point outside the corporate perimeter, and then lure the employees of the organization to connect to it?
War driving
Rogue access points
MAC spoofing
Client mis-association
Question 18
File deletion is a way of removing a file from a computer's file system. What happens when a file is deleted in windows7?
The last letter of a file name is replaced by a hex byte code E5h
The operating system marks the file's name in the MFT with a special character that indicates that the file has been deleted
Corresponding clusters in FAT are marked as used
The computer looks at the clusters occupied by that file and does not avails space to store a new file
Question 19
What is cold boot (hard boot)?
It is the process of starting a computer from a powered-down or off state
It is the process of restarting a computer that is already turned on through the operating system
It is the process of shutting down a computer from a powered-on or on state
It is the process of restarting a computer that is already in sleep mode
Question 20
When a file or folder is deleted, the complete path, including the original file name, is stored in a special hidden file called "INF02" in the Recycled folder. If the INF02 file is deleted, it is re-created when you___________.
Restart Windows
Kill the running processes in Windows task manager