Exam 25: Digital Evidence at the Network and Transport Layers

Which of the following logs record the IP addresses of computers accessing an FTP server?

VNC software:

The Internet is a packet-switched network.

Which of the following servers maintain logs of when users accessed their e-mail?

On a packet-switched network, computers are not connected using dedicated circuits.

An IP address can only be assigned one name in the Domain Name System.

TCP is an abbreviation for:

IP Address Class B addresses start with 128.0.0.0 through:

Network address translation (NAT) enables many computers to connect to the Internet using only one IP address.

"dig," which comes installed on UNIX and Windows systems, is a tool used for querying DNS.

In addition to the IP address of the sender, SMTP e-mail server logs contain which of the following?

Which of the following is a Class A network?

To make large-scale internetworking more reliable, TCP creates what are called "TCP streams," also known as__________ , to establish, maintain, and terminate connections between hosts.

TCP session hijacking can only be performed using a computer on the same network segment as the client and/or server.

IP address [ 10.40.3.2 ] is a__________ ,__________ network address:

Port 80 is generally associated with the Domain Name System.

RADIUS and TACACS authentication servers keep logs of the IP addresses that were assigned to user accounts connecting to the Internet.

The command 'dig' stands for 'Digital Information Groper'.

__________is a tool for querying DNS.

IP spoofing establishes a bi-directional TCP connection between the attacker's computer and the target.