2024 C702 - FORENSICS AND
NETWORK INTRUSION EXAM WITH
CORRECT ANSWERS
Civil Case - CORRECT-ANSWERSA case involving a noncriminal matter such
as a contract dispute or a claim of patent infringement between two parties.
Criminal Case - CORRECT-ANSWERSA type of case that involve actions that
go against the interests of society, the burden of proving that the accused is
guilty lies entirely with the prosecution.
Azure Activity Logs - CORRECT-ANSWERSA type of Azure platform logs that
record information on the Azure subscription layer. These logs can be viewed
via the Azure portal. These logs record the write operations (POST, UPDATE,
PUT, DELETE) performed on Azure resources within a specific subscription
from outside (or the management plane). Activity logs are generated for
each Azure resource.
Azure Resource Logs - CORRECT-ANSWERSAnother type of platform log that
record information on the operations performed within an Azure resource
(the data plane). The generation of resource logs might vary with the type of
Azure resource/service.
Azure Active Directory Reports - CORRECT-ANSWERSA type of platform logs
in Azure, which identify the risks within an Azure production environment,
help administrators in understanding how Azure services and applications
are executed within the cloud, and troubleshoot the potential issues
hampering the organizational activities.
Azure Storage Analytics Logs - CORRECT-ANSWERSLogs record information
related to all successful and failed requests made to Azure storage services
such as Azure blobs, Azure queue, and Azure table. This logging feature can
be enabled via the Azure portal.
These logs record authenticated as well as anonymous requests. When
enabled for a storage account, these logs are automatically placed in block
blobs in a container called $logs.
S3 Server Access Logs - CORRECT-ANSWERSThese logs, when enabled,
records information of all requests made to any bucket. Requests such as
GET, PUT, and DELETE are captured, which helps investigators to understand
, the actions that were performed on a bucket object along with the users who
performed these actions.
CAN-SPAM's main requirements for senders - CORRECT-ANSWERS▪ Do not
use false or misleading header information
▪ Do not use deceptive subject lines
▪ The commercial email must be identified as an ad
▪ The email must have your valid physical postal address
▪ The email must contain necessary information regarding how to stop
receiving emails from the sender in future
▪ Honor the opt-out request of the recipients within 10 business days
▪ Both the company whose product is promoted in the message and the
emailer hired on contract to send messages must comply with the law
Blackhat Search Engine Optimization (SEO) - CORRECT-ANSWERSUses
aggressive SEO tactics such as keyword stuffing, doorway pages, page
swapping, and adding unrelated keywords to get a higher search engine
ranking for their malware pages.
Spear Phishing Sites - CORRECT-ANSWERSA technique helps attacker mimic
legitimate institutions such as banks, to steal passwords, credit card and
bank account data, and other sensitive information.
Malvertising - CORRECT-ANSWERSInvolves embedding malware-laden
advertisements in authentic online advertising channels to spread malware
onto the systems of unsuspecting users.
Drive-by Download - CORRECT-ANSWERSProgram which automatically
downloads when a user visits a web page, usually without their knowledge or
consent.
Sybil Attack - CORRECT-ANSWERSAttacker uses multiple forged identities to
create a strong illusion of traffic congestion, affecting communication
between neighboring nodes and networks.
Rolling Code - CORRECT-ANSWERSAn attacker jams and sniffs the signal to
obtain the code transferred to the vehicle's receiver and uses it to unlock
and steal the vehicle
NETWORK INTRUSION EXAM WITH
CORRECT ANSWERS
Civil Case - CORRECT-ANSWERSA case involving a noncriminal matter such
as a contract dispute or a claim of patent infringement between two parties.
Criminal Case - CORRECT-ANSWERSA type of case that involve actions that
go against the interests of society, the burden of proving that the accused is
guilty lies entirely with the prosecution.
Azure Activity Logs - CORRECT-ANSWERSA type of Azure platform logs that
record information on the Azure subscription layer. These logs can be viewed
via the Azure portal. These logs record the write operations (POST, UPDATE,
PUT, DELETE) performed on Azure resources within a specific subscription
from outside (or the management plane). Activity logs are generated for
each Azure resource.
Azure Resource Logs - CORRECT-ANSWERSAnother type of platform log that
record information on the operations performed within an Azure resource
(the data plane). The generation of resource logs might vary with the type of
Azure resource/service.
Azure Active Directory Reports - CORRECT-ANSWERSA type of platform logs
in Azure, which identify the risks within an Azure production environment,
help administrators in understanding how Azure services and applications
are executed within the cloud, and troubleshoot the potential issues
hampering the organizational activities.
Azure Storage Analytics Logs - CORRECT-ANSWERSLogs record information
related to all successful and failed requests made to Azure storage services
such as Azure blobs, Azure queue, and Azure table. This logging feature can
be enabled via the Azure portal.
These logs record authenticated as well as anonymous requests. When
enabled for a storage account, these logs are automatically placed in block
blobs in a container called $logs.
S3 Server Access Logs - CORRECT-ANSWERSThese logs, when enabled,
records information of all requests made to any bucket. Requests such as
GET, PUT, and DELETE are captured, which helps investigators to understand
, the actions that were performed on a bucket object along with the users who
performed these actions.
CAN-SPAM's main requirements for senders - CORRECT-ANSWERS▪ Do not
use false or misleading header information
▪ Do not use deceptive subject lines
▪ The commercial email must be identified as an ad
▪ The email must have your valid physical postal address
▪ The email must contain necessary information regarding how to stop
receiving emails from the sender in future
▪ Honor the opt-out request of the recipients within 10 business days
▪ Both the company whose product is promoted in the message and the
emailer hired on contract to send messages must comply with the law
Blackhat Search Engine Optimization (SEO) - CORRECT-ANSWERSUses
aggressive SEO tactics such as keyword stuffing, doorway pages, page
swapping, and adding unrelated keywords to get a higher search engine
ranking for their malware pages.
Spear Phishing Sites - CORRECT-ANSWERSA technique helps attacker mimic
legitimate institutions such as banks, to steal passwords, credit card and
bank account data, and other sensitive information.
Malvertising - CORRECT-ANSWERSInvolves embedding malware-laden
advertisements in authentic online advertising channels to spread malware
onto the systems of unsuspecting users.
Drive-by Download - CORRECT-ANSWERSProgram which automatically
downloads when a user visits a web page, usually without their knowledge or
consent.
Sybil Attack - CORRECT-ANSWERSAttacker uses multiple forged identities to
create a strong illusion of traffic congestion, affecting communication
between neighboring nodes and networks.
Rolling Code - CORRECT-ANSWERSAn attacker jams and sniffs the signal to
obtain the code transferred to the vehicle's receiver and uses it to unlock
and steal the vehicle
