Multiple Choice
Why is it important to determine the level of network connectivity on a UNIX system as soon as possible?
A) As UNIX Systems may be configured to store critical evidence on remote systems, network connections must be determined and exploited before any evidence stored remotely is destroyed.
B) To keep suspects and spectators from accessing the target system during the investigation.
C) To determine if the system administrator is a suspect.
D) None of the above.
Correct Answer:

Verified
Correct Answer:
Verified
Q17: When a file is deleted on a
Q18: A list of currently mounted drives, including
Q19: Unlike the standard DOS/Windows environments, the UNIX
Q20: MAC times, which are found in the_
Q21: On UNIX systems, e-mails and all attachments
Q23: The "istat" command, found in The Coroner's
Q24: FireFox 3 stores potentially notable information in:<br>A)
Q25: When examining a UNIX system, searching for
Q26: Deleting a file has the effect of
Q27: The mainstay of acquiring digital evidence using