IISFA II0-001 CIFI Exam Questions Instant Access

Question 1

Firewalls are an excellent source of:

ADetails of system usage

BDetails of protocol usage

CForensic Evidence for malicious attacks

DPort/service mappings

Answer : C

Question 2

A well rounded information security program should include:

AUnderstanding on how to prevent events

BA security awareness program

CUnderstanding on how viruses work

DAll of the above

Answer : B

Question 3

Which of the following is an effective method for completing a disk image quickly?

ANetwork based copy

BZip Disk

CCompact Flash Card

DExternal RS232 connected drive

Answer : C

Question 4

Expertise in a team leader should include:

AStrong process background

BMinor technical knowledge

CSupervisor with at least 2 years experience

DAbility to work with peers

EBrief understanding of legal issues

Answer : A

Question 5

The following tool output example can be used in a dynamic investigation. What will it demonstrate?

Active Connections

Proto Local Address Foreign Address StateTCP local:epmap 90.21.1.4:0 LISTENING

TCP local:1036 baym-cs17.msgr.hotmail.com:1863 ESTABLISHED

TCP local:4925 mail.infoforensics.org:pop3 TIME_WAIT

TCP local:4926 mail.in

AAll machines on the local network

BThe local ARP table

CAll port services used to attack the host

DAll connection states to foreign hosts

Answer : D

Question 6

Most BIOS manufacturers provide tools to disable passwords on the BIOS of their machines

ATrue

BFalse

Answer : A

Question 7

Processes included in the investigative process are?

AIdentification, Collection, & Authentication

BExamination, Inspection, & Collection

CAnalysis, Identification, & Authentication

DCollection, Analysis, & Preservation

Answer : D

IISFA Certified Information Forensics Investigator II0-001 CIFI Exam Questions