CHFI test with Complete Solutions 100%
Verified
the cracking of the operating system and all other utilities that enable a computer to function -
✔✔system software password cracking
steganogrphy technique that allows you to encode information the ensures creation of cover for
secret communication - ✔✔cover generation techniques
key combination that recovers the IMEI number of a cell phone - ✔✔*#06#
is responsible for securing the scene and ensuring that it is maintained in a secure state until the
forensic team advises - ✔✔Non-Laboratory staff
a new line injection attack is achieved by an injecting what into the log file - ✔✔Plaintext
during the seizure of digital evidence, the _________ cannot be allowed to touch the computer
system. - ✔✔suspects
a password cracking technique that works like a dictionary attack, but adds some numbers and
symbols to the words from the dictionary and tries to crack the password. - ✔✔Hybrid attack
is more important than the exact format in the report to eliminate uncertainty and confusion -
✔✔Consistency
,when dealing with the powered-off computer - ✔✔leave it off
MAC filtering address length - ✔✔48-bit address command
in windows 7 to access the arp table - ✔✔C;\arp -a wis a
root folder of the registry editor - ✔✔hkey_users
command that will allow you to look at which sessions the machine has opened with other
systems - ✔✔net use
A set of ANSI standard electronic interfaces that allow personal computers to communicate with
peripheral hardware such as disk drives, tape drives. CD-ROM drives, printers, and scanners -
✔✔what is a scsi
windows command that displays the network configuration of nics - ✔✔ipconfig /all
linux journaling file system - ✔✔ext3
steganography types hide the secret message in a specifically designed pattern on the document
that is unclear to the average reader - ✔✔Open code steganography
provide an Interface between end users and web servers through a set of web pages that are
,generated at the server-end or contain script code to be executed dynamically within the client
Web browser - ✔✔web applications an attack that sends dns packets to non-company
configured IP - ✔✔dns poisoning
table is used to covert huge word lists into password hashes - ✔✔Rainbow tables
a communication standard used in serial communication of data acquistion systems - ✔✔rs2332
an incorrect procedure when preserving digital evidence - ✔✔extract windows event viewr log
files
an aspect of organizational security, especially focusing on IT security - ✔✔application security
checks and compares all the fields systematically and intentionally for positive and negative
correlation with each other to determine the correlation across one or multiple fields -
✔✔automated field correlation approach
the processes and techniques used to collect, aggregate, and analyze computer-generated log
messages. It consists of the hardware, software, network and media used to generate, transmit,
store, analyze, and dispose of log data - ✔✔Log management
Data files from original evidence should _____ be used for forensics analysis - ✔✔never
http://www.juggyDoy.corn/GET/process.php./././././././././etc/passwd. is an example of
what kind of attack - ✔✔Directory traversal
, Subscriber Identity Module (SIM) is a removable component that contains essential information
about the subscriber. Its main function entails authenticating the user of the cell phone to the
network to gain access to subscribed services. SIM contains a 20-digit long Integrated Circuit
Card identification(ICCID)number,identifytheissueridentifierNumberfromtheICCIDbelow. 89 44
245252 001451548 - ✔✔245242
The Electronic Serial Number (ESN) is a unique __________ recorded on a secure chip in a
mobile phone by the manufacturer. - ✔✔32-bitidentifier
First response to an incident may involve three different groups of people, and each will have
differing skills and need to carry out differing tasks based on the incident. Who is responsible for
collecting, preserving, and packaging electronic evidence? - ✔✔Forensic laboratory staff
Task list command displays a list of applications and services with their Process ID (PID) for all
tasks running on either a local or a remote computer.
Whichofthefollowingtasklistcommandsprovidesinformationaboutthelistedprocesses,including the
image name, PID, name, and number of the session for the process? - ✔✔tasklist/V
An expert witness is a witness, who by virtue of education, profession, or experience, is believed
to have _______ ________ of his/her subject beyond that of the average person, sufficient that
others legally depend upon his/her opinion. - ✔✔special knowledge
P0P3 (PostOfficeProtocol3) is a standard protocol for receiving email that deletes mail on the
server as soon as the user downloads it. When a message arrives, the POP3 server appends it to
the bottom of the recipient's account file, which can be retrieved by the email client at any
preferred time. Email client connects to the POP3 server at _______________ by default to fetch
emails. - ✔✔Port110
Windows Security Event Log contains records of login/logout activity or other security-related
events specified by the system's audit policy. What does event ID 531 in Windows Security
Event Log indicates? - ✔✔A log on attempt was made using a disabled account
Verified
the cracking of the operating system and all other utilities that enable a computer to function -
✔✔system software password cracking
steganogrphy technique that allows you to encode information the ensures creation of cover for
secret communication - ✔✔cover generation techniques
key combination that recovers the IMEI number of a cell phone - ✔✔*#06#
is responsible for securing the scene and ensuring that it is maintained in a secure state until the
forensic team advises - ✔✔Non-Laboratory staff
a new line injection attack is achieved by an injecting what into the log file - ✔✔Plaintext
during the seizure of digital evidence, the _________ cannot be allowed to touch the computer
system. - ✔✔suspects
a password cracking technique that works like a dictionary attack, but adds some numbers and
symbols to the words from the dictionary and tries to crack the password. - ✔✔Hybrid attack
is more important than the exact format in the report to eliminate uncertainty and confusion -
✔✔Consistency
,when dealing with the powered-off computer - ✔✔leave it off
MAC filtering address length - ✔✔48-bit address command
in windows 7 to access the arp table - ✔✔C;\arp -a wis a
root folder of the registry editor - ✔✔hkey_users
command that will allow you to look at which sessions the machine has opened with other
systems - ✔✔net use
A set of ANSI standard electronic interfaces that allow personal computers to communicate with
peripheral hardware such as disk drives, tape drives. CD-ROM drives, printers, and scanners -
✔✔what is a scsi
windows command that displays the network configuration of nics - ✔✔ipconfig /all
linux journaling file system - ✔✔ext3
steganography types hide the secret message in a specifically designed pattern on the document
that is unclear to the average reader - ✔✔Open code steganography
provide an Interface between end users and web servers through a set of web pages that are
,generated at the server-end or contain script code to be executed dynamically within the client
Web browser - ✔✔web applications an attack that sends dns packets to non-company
configured IP - ✔✔dns poisoning
table is used to covert huge word lists into password hashes - ✔✔Rainbow tables
a communication standard used in serial communication of data acquistion systems - ✔✔rs2332
an incorrect procedure when preserving digital evidence - ✔✔extract windows event viewr log
files
an aspect of organizational security, especially focusing on IT security - ✔✔application security
checks and compares all the fields systematically and intentionally for positive and negative
correlation with each other to determine the correlation across one or multiple fields -
✔✔automated field correlation approach
the processes and techniques used to collect, aggregate, and analyze computer-generated log
messages. It consists of the hardware, software, network and media used to generate, transmit,
store, analyze, and dispose of log data - ✔✔Log management
Data files from original evidence should _____ be used for forensics analysis - ✔✔never
http://www.juggyDoy.corn/GET/process.php./././././././././etc/passwd. is an example of
what kind of attack - ✔✔Directory traversal
, Subscriber Identity Module (SIM) is a removable component that contains essential information
about the subscriber. Its main function entails authenticating the user of the cell phone to the
network to gain access to subscribed services. SIM contains a 20-digit long Integrated Circuit
Card identification(ICCID)number,identifytheissueridentifierNumberfromtheICCIDbelow. 89 44
245252 001451548 - ✔✔245242
The Electronic Serial Number (ESN) is a unique __________ recorded on a secure chip in a
mobile phone by the manufacturer. - ✔✔32-bitidentifier
First response to an incident may involve three different groups of people, and each will have
differing skills and need to carry out differing tasks based on the incident. Who is responsible for
collecting, preserving, and packaging electronic evidence? - ✔✔Forensic laboratory staff
Task list command displays a list of applications and services with their Process ID (PID) for all
tasks running on either a local or a remote computer.
Whichofthefollowingtasklistcommandsprovidesinformationaboutthelistedprocesses,including the
image name, PID, name, and number of the session for the process? - ✔✔tasklist/V
An expert witness is a witness, who by virtue of education, profession, or experience, is believed
to have _______ ________ of his/her subject beyond that of the average person, sufficient that
others legally depend upon his/her opinion. - ✔✔special knowledge
P0P3 (PostOfficeProtocol3) is a standard protocol for receiving email that deletes mail on the
server as soon as the user downloads it. When a message arrives, the POP3 server appends it to
the bottom of the recipient's account file, which can be retrieved by the email client at any
preferred time. Email client connects to the POP3 server at _______________ by default to fetch
emails. - ✔✔Port110
Windows Security Event Log contains records of login/logout activity or other security-related
events specified by the system's audit policy. What does event ID 531 in Windows Security
Event Log indicates? - ✔✔A log on attempt was made using a disabled account
