NetApp New Release 312-49V8 Questions & Answers

• Question 21:

  What document does the screenshot represent?

  

  A. Chain of custody form

  B. Search warrant form

  C. Evidence collection form

  D. Expert witness form

  Correct Answer: A

• Question 22:

  Which of the following standard is based on a legal precedent regarding the admissibility of scientific examinations or experiments in legal cases?

  A. Daubert Standard

  B. Schneiderman Standard

  C. Frye Standard

  D. FERPA standard

  Correct Answer: C

• Question 23:

  A forensic investigator is a person who handles the complete Investigation process, that is, the preservation, identification, extraction, and documentation of the evidence. The investigator has many roles and responsibilities relating to the cybercrime analysis. The role of the forensic investigator is to:

  A. Take permission from all employees of the organization for investigation

  B. Harden organization network security

  C. Create an image backup of the original evidence without tampering with potential evidence

  D. Keep the evidence a highly confidential and hide the evidence from law enforcement agencies

  Correct Answer: C

• Question 24:

  Which of the following is not a part of disk imaging tool requirements?

  A. The tool should not change the original content

  B. The tool should log I/O errors in an accessible and readable form, including the type and location of the error

  C. The tool must have the ability to be held up to scientific and peer review

  D. The tool should not compute a hash value for the complete bit stream copy generated from an image file of the source

  Correct Answer: D

• Question 25:

  How do you define Technical Steganography?

  A. Steganography that uses physical or chemical means to hide the existence of a message

  B. Steganography that utilizes written natural language to hide the message in the carrier in some non-obvious ways

  C. Steganography that utilizes written JAVA language to hide the message in the carrier in some non-obvious ways

  D. Steganography that utilizes visual symbols or signs to hide secret messages

  Correct Answer: A

• Question 26:

  Mobile phone forensics is the science of recovering digital evidence from a mobile phone under forensically sound conditions.

  A. True

  B. False

  Correct Answer: A

• Question 27:

  An attack vector is a path or means by which an attacker can gain access to computer or network resources in order to deliver an attack payload or cause a malicious outcome.

  A. True

  B. False

  Correct Answer: A

• Question 28:

  The need for computer forensics is highlighted by an exponential increase in the number of cybercrimes and litigations where large organizations were involved. Computer forensics plays an important role in tracking the cyber criminals. The main role of computer forensics is to:

  A. Maximize the investigative potential by maximizing the costs

  B. Harden organization perimeter security

  C. Document monitoring processes of employees of the organization

  D. Extract, process, and interpret the factual evidence so that it proves the attacker's actions in the court

  Correct Answer: D

• Question 29:

  What is static executable file analysis?

  A. It is a process that consists of collecting information about and from an executable file without actually launching the file under any circumstances

  B. It is a process that consists of collecting information about and from an executable file by launching the file under any circumstances

  C. It is a process that consists of collecting information about and from an executable file without actually launching an executable file in a controlled and monitored environment

  D. It is a process that consists of collecting information about and from an executable file by launching an executable file in a controlled and monitored environment

  Correct Answer: A

• Question 30:

  Ever-changing advancement or mobile devices increases the complexity of mobile device examinations. Which or the following is an appropriate action for the mobile forensic investigation?

  A. To avoid unwanted interaction with devices found on the scene, turn on any wireless interfaces such as Bluetooth and Wi-Fi radios

  B. Do not wear gloves while handling cell phone evidence to maintain integrity of physical evidence

  C. If the device's display is ON. the screen's contents should be photographed and, if necessary, recorded manually, capturing the time, service status, battery level, and other displayed icons

  D. If the phone is in a cradle or connected to a PC with a cable, then unplug the device from the computer

  Correct Answer: C