What command does a Digital Forensic Examiner use to display the list of all open ports and the associated IP addresses on a victim computer to identify the established connections on it:

• A. "ifconfig" command
• B. "netstat -an" command
• C. "dd" command
• D. "arp" command

Raven is a part of an IH&R team and was informed by her manager to handle and lead the removal of the root cause for an incident and to close all attack vectors to prevent similar incidents in the future. Raven notifies the service providers and developers of affected resources.
Which of the following steps of the incident handling and response process does Raven need to implement to remove the root cause of the incident?

• A. Incident triage
• B. Evidence gathering and forensic analysis
• C. Eracicotion
• D. Containment

설명: (Fast2test 회원만 볼 수 있음)

NovoMed, a pharmaceutical giant, recently launched a drug after 10 years of research. A week later, their systems were compromised. Forensics revealed encrypted data transfers to an unknown location. The encrypted data consisted of the drug's research files, trials, and participant data. Additionally, the company's communication systems received a message in broken English, hinting at releasing the drug's formula. Which is the most prudent course of action?

• A. Engage with local law enforcement and international cybercrime agencies to trace the encrypted data transfer's origins.
• B. Publicly announce the breach, warning competitors and authorities about potential counterfeit drugs.
• C. Negotiate with the attackers discreetly, trying to buy time and perhaps retrieve the data.
• D. Immediately recall the drug from the market, anticipating counterfeit versions.

설명: (Fast2test 회원만 볼 수 있음)

Patrick is doing a cyber forensic investigation. He is in the process of collecting physical evidence at the crime scene.
Which of the following elements he must consider while collecting physical evidence?

• A. Published name servers and web application source code
• B. Removable media, cable, and publications
• C. DNS information including domain and subdomains
• D. Open ports, services, and operating system (OS) vulnerabilities

설명: (Fast2test 회원만 볼 수 있음)

As a senior network security analyst at a multinational corporation, you are part of an expert team overseeing the security of a complex network. An alert comes through one morning, indicating potential unauthorized access through a vulnerable Wi-Fi connection in one of your global offices.
The nature of the breach suggests possible intellectual property theft. Your team is assigned to validate and respond to the incident. In this complex scenario, what is the primary goal of a network security incident response plan?

• A. Minimizing costs associated with the incident response
• B. Identifying, containing, eradicating, and recovering from the incident
• C. Implementing new business strategies for the company
• D. Expanding the company's global reach and market share