Digital Forensic Certification Exam
1. Jack, ca cdisgruntled cemployee cof can corganization, cgained caccess cto
cthe corganization's cdatabase cserver. cHe cmanipulated cclient crecords cstored
con cthe cdatabase cserver cto cdamage cthe creputation cof cthe corganization cand
cto cmake cthe corganization cface clegal cconsequences cfor closing cintegrity.
Identify cthe ctype cof cattack cperformed cby cJack cin cthe cabove cscenario.:
cInternal cattack
Explanation:
Brute-force cattack: cA cbrute-force cattack cis cperformed cby
cattempting call cpossible ccombinations cof cusernames cand
cpasswords cto cdetermine cvalid ccredentials.
Internal cattack: cThese cattacks coriginate cfrom cpeople cwithin cthe
corganization csuch cas cdisgruntled cemployees, ccurrent cor cterminated
cemployees, cbusiness cassociates, ccontractors, cand/or cundertrained
cstaff.
External cattack: cExternal cattacks crefer cto cattacks cthat coriginate cfrom
coutside csources. cSuch cattacks coccur cwhen cthe cinformation csecurity
cpolicies cand cprocedures care cinadequate.
Trojan chorse cattack: cA ccomputer cTrojan cis ca cprogram cin cwhich
cmalicious cor charmful ccode cis ccontained cinside can capparently charmless
cprogram cor cdata, cwhich ccan clater cgain ccontrol cand ccause cdamage,
csuch cas cruining cthe cfile callocation ctable con cyour chard cdisk.
2. James, ca cnewly crecruited cemployee cof can corganization, creceived can
cemail ccontaining ca cfake cappointment cletter. cThe cletter cclaims cto chave
cbeen csent cby cthe creal corganization. cJames cfailed cto cidentify cthe
clegitimacy cof cthe cletter cand cdownloaded cit. cConsequently, cmalicious
csoftware cwas cinstalled con chis csystem, cand cit cprovided cremote caccess cto
cthe cattacker.
Identity cthe ctype cof ccybercrime cperformed cby cJames cin cthe cabove
cscenario.: c-
1 c/
,Phishing cattack
3. Which cof cthe cfollowing ctypes cof ccybercrime cinvolves ctaking cadvantage
cof cunsanitized cinput cvulnerabilities cto cpass ccommands cthrough ca cweb
capplication cand cthereby cretrieve cinformation cfrom cthe ctarget cdatabase?:
cSQL cinjection cattack
4. Benjamin, ca cprofessional chacker, cjoined cas can cintern cin can
corganization cand cobtained csome cpermissions cto caccess cthe cresources
crelated cto chis cjob. cSoon cafter cgaining ctrust cin cthe corganization, che
cobtained celevated cpermissions cto caccess crestricted cparts cof cthe cnetwork.
cThus, che cgained caccess cto cconfidential cdata cof cthe corganization.
Identify cthe ctype cof cattack cperformed cby cBenjamin cin cthe cabove cscenario.:
cPriv- cilege cescalation cattack
2 c/
,5. Henry, ca cprofessional chacker, ctargeted can corganization cto cgain
cillegitimate caccess cto cits cserver. cHe claunched can cSQL cinjection cattack
cfrom ca cremote clocation con cthe ctarget cserver cto cobtain cusers'
ccredentials.
Which cof cthe cfollowing ctypes cof cattack chas cHenry cperformed cin cthe
cabove cscenario?: cExternal cattack
6. Medicing cInc. ctargeted ctheir ccompetitor corganization cto csteal
cinformation cabout ctheir cproduct cthat cgained cimmense cpopularity cwithin ca
cbrief cperiod. cFor cthis cpurpose, cMedicing cInc. cemployed cDon, ca
cprofessional chacker. cDon cperformed copen-source cintelligence cgathering
cand canalyzed cthe ctarget cprod- cuct's cdetails. cUsing cthe cobtained
cinformation, cMedicing cInc. ccreated ca csimilar cproduct cand claunched cit cwith
ca clower cprice.
Identify cthe ccybercrime cdemonstrated cin cthe cabove cscenario.: cEspionage
7. Don, ca cprofessional chacker, ctargeted cJohana's cofficial cemail caccount cto
csteal cher cproject-related cfiles cstored cin cit. cIn cthis cprocess, cDon ctried call
cthe cpossible ccombinations cof cpassword ccharacters cthrough cthe ctrial-and-
error cmethod cand cfinally clogged cinto cher caccount.
Identify cthe ctype cof ccybercrime cdemonstrated cin cthe cabove cscenario: c-
Brute-force cattack
8. Which cof cthe cfollowing ctypes cof cattack cis cperformed cusing ca cseemingly
charmless cprogram ccontaining cmalicious ccode cthat ccan clater cgain ccontrol
cand ccause cdamage, csuch cas cdestruction cof cthe cfile callocation ctable con ca
chard cdisk?: cTrojan chorse cattack
Explanation:
Trojan chorse cattack: cA ccomputer cTrojan cis ca cprogram cin cwhich
cmalicious cor charmful ccode cis ccontained cinside can capparently charmless
cprogram cor cdata, cwhich ccan clater cgain ccontrol cand ccause cdamage,
csuch cas cruining cthe cfile callocation ctable con cyour chard cdisk.
Denial cof cservice cattack: cA cDoS cattack cis can cattack con ca ccomputer cor
cnetwork cthat creduces, crestricts, cor cprevents caccess cto csystem
cresources cfor clegitimate cusers. cIn ca cDoS cattack, cattackers cflood ca
cvictim's csystem cwith cnonlegitimate cservice crequests cor ctraffic cto
coverload cits cresources cand cbring cdown cthe csystem, cleading cto cthe
cunavailability cof cthe cvictim's cwebsite cor cat cleast csignificantly creducing
cthe cvictim's csystem cor cnetwork cperformance.
Structured cquery clanguage cattack: cSQL cinjection/attack cis ca ctechnique
cused cto ctake cadvantage cof cunsanitized cinput cvulnerabilities cto cpass
3 c/
, cSQL ccommands cthrough ca cweb capplication cfor cexecution cby ca cbackend
cdatabase. cIn cthis ctechnique, cthe cattacker cinjects cmalicious cSQL cqueries
cinto cthe cuser cinput cform ceither cto cgain cunauthorized caccess cto ca
cdatabase cor cto cretrieve cinformation cdirectly cfrom cthe cdatabase.
4 c/
1. Jack, ca cdisgruntled cemployee cof can corganization, cgained caccess cto
cthe corganization's cdatabase cserver. cHe cmanipulated cclient crecords cstored
con cthe cdatabase cserver cto cdamage cthe creputation cof cthe corganization cand
cto cmake cthe corganization cface clegal cconsequences cfor closing cintegrity.
Identify cthe ctype cof cattack cperformed cby cJack cin cthe cabove cscenario.:
cInternal cattack
Explanation:
Brute-force cattack: cA cbrute-force cattack cis cperformed cby
cattempting call cpossible ccombinations cof cusernames cand
cpasswords cto cdetermine cvalid ccredentials.
Internal cattack: cThese cattacks coriginate cfrom cpeople cwithin cthe
corganization csuch cas cdisgruntled cemployees, ccurrent cor cterminated
cemployees, cbusiness cassociates, ccontractors, cand/or cundertrained
cstaff.
External cattack: cExternal cattacks crefer cto cattacks cthat coriginate cfrom
coutside csources. cSuch cattacks coccur cwhen cthe cinformation csecurity
cpolicies cand cprocedures care cinadequate.
Trojan chorse cattack: cA ccomputer cTrojan cis ca cprogram cin cwhich
cmalicious cor charmful ccode cis ccontained cinside can capparently charmless
cprogram cor cdata, cwhich ccan clater cgain ccontrol cand ccause cdamage,
csuch cas cruining cthe cfile callocation ctable con cyour chard cdisk.
2. James, ca cnewly crecruited cemployee cof can corganization, creceived can
cemail ccontaining ca cfake cappointment cletter. cThe cletter cclaims cto chave
cbeen csent cby cthe creal corganization. cJames cfailed cto cidentify cthe
clegitimacy cof cthe cletter cand cdownloaded cit. cConsequently, cmalicious
csoftware cwas cinstalled con chis csystem, cand cit cprovided cremote caccess cto
cthe cattacker.
Identity cthe ctype cof ccybercrime cperformed cby cJames cin cthe cabove
cscenario.: c-
1 c/
,Phishing cattack
3. Which cof cthe cfollowing ctypes cof ccybercrime cinvolves ctaking cadvantage
cof cunsanitized cinput cvulnerabilities cto cpass ccommands cthrough ca cweb
capplication cand cthereby cretrieve cinformation cfrom cthe ctarget cdatabase?:
cSQL cinjection cattack
4. Benjamin, ca cprofessional chacker, cjoined cas can cintern cin can
corganization cand cobtained csome cpermissions cto caccess cthe cresources
crelated cto chis cjob. cSoon cafter cgaining ctrust cin cthe corganization, che
cobtained celevated cpermissions cto caccess crestricted cparts cof cthe cnetwork.
cThus, che cgained caccess cto cconfidential cdata cof cthe corganization.
Identify cthe ctype cof cattack cperformed cby cBenjamin cin cthe cabove cscenario.:
cPriv- cilege cescalation cattack
2 c/
,5. Henry, ca cprofessional chacker, ctargeted can corganization cto cgain
cillegitimate caccess cto cits cserver. cHe claunched can cSQL cinjection cattack
cfrom ca cremote clocation con cthe ctarget cserver cto cobtain cusers'
ccredentials.
Which cof cthe cfollowing ctypes cof cattack chas cHenry cperformed cin cthe
cabove cscenario?: cExternal cattack
6. Medicing cInc. ctargeted ctheir ccompetitor corganization cto csteal
cinformation cabout ctheir cproduct cthat cgained cimmense cpopularity cwithin ca
cbrief cperiod. cFor cthis cpurpose, cMedicing cInc. cemployed cDon, ca
cprofessional chacker. cDon cperformed copen-source cintelligence cgathering
cand canalyzed cthe ctarget cprod- cuct's cdetails. cUsing cthe cobtained
cinformation, cMedicing cInc. ccreated ca csimilar cproduct cand claunched cit cwith
ca clower cprice.
Identify cthe ccybercrime cdemonstrated cin cthe cabove cscenario.: cEspionage
7. Don, ca cprofessional chacker, ctargeted cJohana's cofficial cemail caccount cto
csteal cher cproject-related cfiles cstored cin cit. cIn cthis cprocess, cDon ctried call
cthe cpossible ccombinations cof cpassword ccharacters cthrough cthe ctrial-and-
error cmethod cand cfinally clogged cinto cher caccount.
Identify cthe ctype cof ccybercrime cdemonstrated cin cthe cabove cscenario: c-
Brute-force cattack
8. Which cof cthe cfollowing ctypes cof cattack cis cperformed cusing ca cseemingly
charmless cprogram ccontaining cmalicious ccode cthat ccan clater cgain ccontrol
cand ccause cdamage, csuch cas cdestruction cof cthe cfile callocation ctable con ca
chard cdisk?: cTrojan chorse cattack
Explanation:
Trojan chorse cattack: cA ccomputer cTrojan cis ca cprogram cin cwhich
cmalicious cor charmful ccode cis ccontained cinside can capparently charmless
cprogram cor cdata, cwhich ccan clater cgain ccontrol cand ccause cdamage,
csuch cas cruining cthe cfile callocation ctable con cyour chard cdisk.
Denial cof cservice cattack: cA cDoS cattack cis can cattack con ca ccomputer cor
cnetwork cthat creduces, crestricts, cor cprevents caccess cto csystem
cresources cfor clegitimate cusers. cIn ca cDoS cattack, cattackers cflood ca
cvictim's csystem cwith cnonlegitimate cservice crequests cor ctraffic cto
coverload cits cresources cand cbring cdown cthe csystem, cleading cto cthe
cunavailability cof cthe cvictim's cwebsite cor cat cleast csignificantly creducing
cthe cvictim's csystem cor cnetwork cperformance.
Structured cquery clanguage cattack: cSQL cinjection/attack cis ca ctechnique
cused cto ctake cadvantage cof cunsanitized cinput cvulnerabilities cto cpass
3 c/
, cSQL ccommands cthrough ca cweb capplication cfor cexecution cby ca cbackend
cdatabase. cIn cthis ctechnique, cthe cattacker cinjects cmalicious cSQL cqueries
cinto cthe cuser cinput cform ceither cto cgain cunauthorized caccess cto ca
cdatabase cor cto cretrieve cinformation cdirectly cfrom cthe cdatabase.
4 c/
