210-255 試験問題を無料オンラインアクセス

You receive an alert for malicious code that exploits Internet Explorer and runs arbitrary code on the site visitor machine. The malicous code is on an external site that is being visited by hosts on your network. Which user agent in the HTTP headers in the requests from your internal hosts warrants further investigation?

• A.Mozilla/5.0 (XII; Linux i686; rv: 1.9.2.20) Gecko/20110805
• B.Mozilla/5.0 (Windows NT 6.1; WOW64; rv: 4O0) Gecko/20100101
• C.Mozilla/5.0 (compatible, MSIE 10.0, Windows NT 6.2, Trident 6.0)
• D.Opera/9.80 (XII; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16

Which of the following is not true regarding the use of digital evidence?

• A.Digital evidence helps legal teams and the court develop reliable hypotheses or theories as to the committer of the crime or threat actor.
• B.The reliability of the digital evidence is not as important as someone's testimony to supporting or refuting any hypothesis put forward, including the attribution of threat actors.
• C.The reliability of the digital evidence is vital to supporting or refuting any hypothesis put forward, including the attribution of threat actors.
• D.Digital forensics evidence provides implications and extrapolations that may assist in proving some key fact of the case.

Which of the following is true about journaling?

• A.The journal is the least used part of the disk, making the blocks that form part of it more prone to hardware failure.
• B.The journal is the most used part of the disk, making the blocks that form part of it less prone to hardware failure.
• C.The journal is the most used part of the disk, making the blocks that form part of it more prone to hardware failure.
• D.The journal is the least used part of the disk, making the blocks that form part of it less prone to hardware failure.

Which of the following file systems is more secure, scalable, and advanced?

• A.FAT64
• B.NTFS
• C.uFAT
• D.FAT32

Which of the following are examples of some of the responsibilities of a corporate CSIRT and the policies it helps create? (Select all that apply.)

• A.Information classification and protection
• B.Record retentions and destruction
• C.Incident classification and handling
• D.Scanning vendor customer networks
• E.Information dissemination