Question 1

Match each item with a statement below:
-shuts down and optionally restarts a computer

Accepted Answer

A) Cyberforensics 
B) Ethereal 
C) Tripwire 
D) PsGetSid 
E) PsLoggedOn
F)Trojan horse
G)Knoppix
H)PsShutdown
I)oinkmaster 
A) Cyberforensics 
B) Ethereal 
C) Tripwire 
D) PsGetSid 
E) PsLoggedOn
F)Trojan horse
G)Knoppix
H)PsShutdown
I)oinkmaster

Question 2

With the Knoppix STD tools on a portable CD, you can examine almost any network system.

Accepted Answer

A) True 
 B)False

Question 3

When are live acquisitions useful?

Accepted Answer

Live acquisitions are especially useful

Question 4

Ngrep cannot be used to examine e-mail headers or IRC chats.

Accepted Answer

A) True 
 B)False

Question 5

A common way of examining network traffic is by running the ____ program.

Accepted Answer

A)  Netdump 
B)  Slackdump 
C)  Coredump 
D)  Tcpdump 
A)  Netdump 
B)  Slackdump 
C)  Coredump 
D)  Tcpdump

Question 6

Match each item with a statement below:
-usually refers to network forensics

Accepted Answer

A) Cyberforensics 
B) Ethereal 
C) Tripwire 
D) PsGetSid 
E) PsLoggedOn
F)Trojan horse
G)Knoppix
H)PsShutdown
I)oinkmaster 
A) Cyberforensics 
B) Ethereal 
C) Tripwire 
D) PsGetSid 
E) PsLoggedOn
F)Trojan horse
G)Knoppix
H)PsShutdown
I)oinkmaster

Question 7

What are some of the tools included with Knoppix STD?

Accepted Answer

A few of the Knoppix STD tools include t

Question 8

Match each item with a statement below:
-helps manage snort rules so that you can specify what items to ignore as regular traffic and what items should raise alarms

Accepted Answer

A) Cyberforensics 
B) Ethereal 
C) Tripwire 
D) PsGetSid 
E) PsLoggedOn
F)Trojan horse
G)Knoppix
H)PsShutdown
I)oinkmaster 
A) Cyberforensics 
B) Ethereal 
C) Tripwire 
D) PsGetSid 
E) PsLoggedOn
F)Trojan horse
G)Knoppix
H)PsShutdown
I)oinkmaster

Question 9

____ forensics is the systematic tracking of incoming and outgoing traffic on your network.

Accepted Answer

A)  Network 
B)  Computer 
C)  Criminal 
D)  Server 
A)  Network 
B)  Computer 
C)  Criminal 
D)  Server

Question 10

What are some of the tools included with the PSTools suite?

Accepted Answer

PSTools is a suite created by Sysinterna

Match each item with a statement below: -shuts down and optionally restarts a computer

With the Knoppix STD tools on a portable CD, you can examine almost any network system.

When are live acquisitions useful?

Ngrep cannot be used to examine e-mail headers or IRC chats.

A common way of examining network traffic is by running the ____ program.

Match each item with a statement below: -usually refers to network forensics

What are some of the tools included with Knoppix STD?

Match each item with a statement below: -helps manage snort rules so that you can specify what items to ignore as regular traffic and what items should raise alarms

____ forensics is the systematic tracking of incoming and outgoing traffic on your network.

What are some of the tools included with the PSTools suite?

Computer Forensics and Investigations As a Profession

Understanding Computer Investigations

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Working With Windows and Dos Systems

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Computer Forensics Analysis and Validation

Recovering Graphics Files

E-Mail Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High-Tech Investigations

Expert Testimony in High-Tech Investigations

Ethics for the Expert Witness

Filters

Exam 11: Virtual Machines, Network Forensics, and Live Acquisitions

Match each item with a statement below: -shuts down and optionally restarts a computer

With the Knoppix STD tools on a portable CD, you can examine almost any network system.

When are live acquisitions useful?

Ngrep cannot be used to examine e-mail headers or IRC chats.

A common way of examining network traffic is by running the ____ program.

Match each item with a statement below: -usually refers to network forensics

What are some of the tools included with Knoppix STD?

Match each item with a statement below: -helps manage snort rules so that you can specify what items to ignore as regular traffic and what items should raise alarms

____ forensics is the systematic tracking of incoming and outgoing traffic on your network.

What are some of the tools included with the PSTools suite?

Computer Forensics and Investigations As a Profession

Understanding Computer Investigations

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Working With Windows and Dos Systems

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Computer Forensics Analysis and Validation

Recovering Graphics Files

E-Mail Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High-Tech Investigations

Expert Testimony in High-Tech Investigations

Ethics for the Expert Witness

Filters