II0-001問題集、IISFA実際の試験問題

質問 1

Logs should be kept:

A. 5 years

B. All of the above.

C. As long as possible.

D. Offline

正解: C

質問 2

It is critical for an investigator to understand counter measures and secure design fully in order to:

A. Give her an understanding of the environment and technologies so she can be effective in collecting evidence

B. To find an effective means to apply preventative controls to malicious activity/code

C. To prevent malicious entities from foiling their investigation by illegally acquiring evidence

D. To fight back against bad guys before they strike

正解: A

質問 3

What is the correct command in a Linux 6.0 or later system to check the hash of a hard drive attached to the system?

A. md5sum /dev/hdc

B. hash /dev/dsk1

C. hash disk1

D. md5sum < disk1 > /tmp/results.file

正解: A

質問 4

Which header is not used to determine the source of an email?

A. "Delivered:" header

B. "SMTP From:" header

C. "Received:" header

D. "Message-ID:" header

正解: A

質問 5

A Syslog server provides:

A. The ability to create forensic log files from any system using IPSEC standards.

B. None of the above.

C. The ability to capture logs from multiple systems to a single system.

D. Services to html clients for logging purposes.

正解: C

質問 6

In many cases, the trail of an investigation begins with an audit of:

A. The auditing of a professional development course.

B. The logs of systems and applications.

C. None of the above.

D. The financial information of an organization.

正解: B

質問 7

Added "Received:" headers often include bogus information. All of the following items except one, is usually incomplete:

A. Path

B. "To:" header

C. IDs

D. Dates

正解: B

質問 8

In order to prevent footprinting of an environment, one method that is effective is:

A. ISPs monitoring and filtering footprinting activity

B. None of the above

C. Network address translation at a perimeter security device

D. Footprint shunting

正解: C

質問 9

According to the ISFA Code of Ethics, an ISFA member must conduct themselves with professionalism, honor, and honesty.

A. True

B. False

正解: B

質問 10

What technique of layered security design will allow for both investigation and recovery after an incident?

A. Overlap design approach

B. Highly available systems

C. Honeypot placement

D. RI Technology

正解: B

質問 11

The following is an example of:
Version: PGP 8.0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A. A Diffe-Hellman algorithm public key

B. A Private Gateway Protocol packet

C. A binary packet signature

D. A digital signature

正解: A

質問 12

IP-based denial- of-service (DOS) and fragmented packet (TearDrop) attacks can be identified by looking at the packet headers as they travel across a network. This type of attack can be quickly identified by a network-based IDS looking at the packet stream in real-time. Why is it that the Host-Based IDS miss these attacks?

A. Host-based IDS can be placed in promiscuous mode and therefore is unable to see payload traffic

B. Host-based IDS does not see traffic on the network

C. Host-based IDS only identify alarms that are operating system specific

D. Host-based IDS identify these packets as false positive alarms

正解: B

IISFA Certified Information Forensics Investigator(CIFI) - II0-001 模擬練習