- Study guides, Class notes & Summaries

C702 - Forensics and Network Intrusion exam questions and answers 100% pass Civil Case - A case involving a noncriminal matter such as a contract dispute or a claim of patent infringement between two parties. Criminal Case - A type of case that involve actions that go against the interests of society, the burden of proving that the accused is guilty lies entirely with the prosecution.

2024 C702 - FORENSICS AND NETWORK INTRUSION EXAM WITH CORRECT ANSWERS

2024 C702 - FORENSICS AND NETWORK INTRUSION EXAM WITH CORRECT ANSWERS

Which criterion determines whether a technology used by government to obtain information in a computer search is considered innovative and requires a search warrant? A Availability to the general public B Dependency on third-party software C Implementation based on open source software D Use of cloud-based machine learning - A

Steps to evaluate and secure a scene: - 1. Follow the policies of the legal authority for securing the crime scene. 2. Verify the type of incident. 3. Ensure that the scene is safe for responders. 4. Isolate other persons who are present at the scene. 5. Locate and help the victim. 6. Verify any data that is related to the offense.

Penetrating systems to expose system-level vulnerabilities - Recovering deleted files, hidden files, and temporary data that could be used as evidence Which web application weakness allows sensitive data to be unintentionally revealed to an unauthorized user? Broken access control Information leakage

What are clusters? - the smallest accessible storage units on the hard disk. What is RAM slack? - the data storage space, which starts from the end of a file to the end of the last sector of the file. What is drive slack? - the data storage space, which starts from the end of the last sector of a file to the end of the last cluster of file.

Chain of Custody: - A method for documenting the history and possession of a sample from the time of collection, though analysis and data reporting, to its final disposition Bit Stream copy: - A bit by bit copy of the original storage medium and or evidence Ext3: - Ext3 or third extended file system, is a journaled file system that is commonly used by the Linux kernel. It is the default file system for many popular Linux distributions