EC-COUNCIL Computer Hacking Forensic Investigator (CHFI-v11) - 312-49v11무료 덤프문제 풀어보기
Which of the following files stores information about a local Google Drive installation such as User email ID, Local Sync Root Path, and Client version installed?
정답: B
Netstat is a tool for collecting information regarding network connections. It provides a simple view of TCP and UDP connections, and their state and network traffic statistics. Which of the following commands shows you the TCP and UDP network connections, listening ports, and the identifiers?
정답: A
A Computer Hacking Forensics Investigator (CHFI) has been called in to handle a complex data breach at a large corporation. The investigator plans to follow the rules of thumb for data acquisition during the investigation. Which of the following actions is NOT in line with these best practices?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
Sally accessed the computer system that holds trade secrets of the company where she is employed. She knows she accessed it without authorization and all access (authorized and unauthorized) to this computer is monitored. To cover her tracks, Sally deleted the log entries on this computer. What among the following best describes her action?
정답: D
A file requires 10 KB space to be saved on a hard disk partition. An entire cluster of 32 KB has been allocated for this file. The remaining, unused space of 22 KB on this cluster will be identified as ____________.
정답: C
During a forensic reconstruction of an Intel-based Mac's startup in San Jose, California, examiners must identify the stage that verifies the macOS bootloader before the operating system starts. Which component performs this verification?
정답: C
설명: (Fast2test 회원만 볼 수 있음)
During a complex investigation, an investigator is tasked with extracting email data from a corrupt file format generated by the organization's email client. The investigator requires a tool capable of converting this file into the widely compatible EML format, ensuring that the data is easily accessible for analysis. The tool must also support migration to various email servers and web- based platforms, with advanced filtering options to selectively migrate only relevant data. Which tool would be most suitable for this task?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
To which phase of the Computer Forensics Investigation Process does the Planning and Budgeting of a Forensics Lab belong?
정답: D
David, a network forensic investigator, is reviewing the firewall logs after the security team reports a potential security incident. The company has recently experienced unusual traffic patterns, especially from external sources, and the IT department is concerned that a targeted attack may be underway. While reviewing the firewall logs, David spots several denied inbound connection attempts from an unfamiliar IP address. These attempts seem to originate from outside the expected network range. The connection attempts are consistently denied by the firewall, but they are occurring at unusual times, which raises concerns.
Given the heightened state of alert, David must determine if these suspicious connection attempts are part of a broader intrusion attempt or simply harmless scanning activity. As he examines the log details, he considers several factors to help him assess the seriousness of the situation. Among the details in the firewall log, which one will provide the most critical information to help David determine if these denied attempts are part of a potential intrusion attempt?
Given the heightened state of alert, David must determine if these suspicious connection attempts are part of a broader intrusion attempt or simply harmless scanning activity. As he examines the log details, he considers several factors to help him assess the seriousness of the situation. Among the details in the firewall log, which one will provide the most critical information to help David determine if these denied attempts are part of a potential intrusion attempt?
정답: C
설명: (Fast2test 회원만 볼 수 있음)
You're a cybersecurity analyst tasked with understanding the functionality of a Web Application Firewall (WAF) and its role in protecting web applications from various attacks. You need to grasp the benefits and limitations of WAFs and learn how to analyze log files generated by WAF tools like ModSecurity to detect web-based attacks.
What is the primary function of a Web Application Firewall (WAF)?
What is the primary function of a Web Application Firewall (WAF)?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
Consider a scenario where a forensic investigator is performing malware analysis on a memory dump acquired from a victim's computer. The investigator uses Volatility Framework to analyze RAM contents: which plugin helps investigator to identify hidden processes or injected code/DLL in the memory dump?
정답: A
After initiating an internal fraud investigation in San Jose, California, examiners must obtain a forensically useful iPhone backup via Finder on a Mac. The lab requires that the backup be password-protected so it preserves credentials and other protected items for analysis. What action must be selected in the Finder workflow to meet this requirement?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
During a corporate fraud investigation, analysts examine a workstation where a user attempted to obscure web activity by relying on private browsing features across multiple modem browsers.
Although browser-level traces appear limited, investigators recover residual evidence indicating that user-entered queries and browsing fragments persisted beyond the active session lifecycle.
From which artifact can investigators most reliably recover this type of residual evidence across multiple browsers?
Although browser-level traces appear limited, investigators recover residual evidence indicating that user-entered queries and browsing fragments persisted beyond the active session lifecycle.
From which artifact can investigators most reliably recover this type of residual evidence across multiple browsers?
정답: C
설명: (Fast2test 회원만 볼 수 있음)