CHFIv9 312-49v9 Practice Test Engine Try These 586 Exam Questions [Q254-Q272]

NEW QUESTION 254
You setup SNMP in multiple offices of your company. Your SNMP software manager is not receiving data from other offices like it is for your main office. You suspect that firewall changes are to blame. What ports should you open for SNMP to work through Firewalls
(Select 2)

NEW QUESTION 255
Netstat is a tool for collecting information regarding network connections. It provides a simple view of TCP and UDP connections, and their state and network traffic statistics. Which of the following commands shows you the TCP and UDP network connections, listening ports, and the identifiers?

NEW QUESTION 256
What malware analysis operation can the investigator perform using the jv16 tool?

NEW QUESTION 257
You have been given the task to investigate web attacks on a Windows-based server.
Which of the following commands will you use to look at which sessions the machine has opened with other systems?

NEW QUESTION 258
The offset in a hexadecimal code is:

NEW QUESTION 259
Which of the following Android libraries are used to render 2D (SGL) or 3D (OpenGL/ES) graphics content to the screen?

NEW QUESTION 260
When investigating a Windows System, it is important to view the contents of the page or swap file because:

NEW QUESTION 261
An expert witness is a ________ who is normally appointed by a party to assist in the formulation and preparation of a party’s claim or defense.

NEW QUESTION 262
On an Active Directory network using NTLM authentication, where on the domain controllers are the passwords stored?

NEW QUESTION 263
In an echo data hiding technique, the secret message is embedded into a __________as an echo.

NEW QUESTION 264
Which of the following standard represents a legal precedent regarding the admissibility of scientific examinations or experiments in legal cases?

NEW QUESTION 265
What is the First Step required in preparing a computer for forensics investigation?

NEW QUESTION 266
Which of the following stand true for BIOS Parameter Block?

NEW QUESTION 267
Richard is extracting volatile data from a system and uses the command doskey /history.
What is he trying to extract?

NEW QUESTION 268
What must be obtained before an investigation is carried out at a location?

NEW QUESTION 269
You should always work with original evidence

NEW QUESTION 270
An intrusion detection system (IDS) gathers and analyzes information from within a computer or a network to identify any possible violations of security policy, including unauthorized access, as well as misuse.
Which of the following intrusion detection systems audit events that occur on a specific host?

NEW QUESTION 271
Recovery of the deleted partition is the process by which the investigator evaluates and extracts the deleted partitions.

NEW QUESTION 272
LBA (Logical Block Address) addresses data by allotting a ___________to each sector of the hard disk.