IISFA Certified Information Forensics Investigator II0-001 CIFI Exam Questions

A honeypot may be configured to allow a continuation of a malicious attack while preserving the target of the attack.

What term refers to the technique of utilizing inferential evidence and social engineering in order to identify a subject of an investigation when search warrant or subpoena is unavailable?

When auditing log files for system discrepancies, why is NTP important?

"Interesting data" is:

A bad guy discovers child pornography on a system he has illegally penetrated. He immediately reports it to law enforcement and the owner of the system is arrested and charged. Therefore, the hacker cannot be charged for the intrusion.

The required files to boot an MS-DOS system are:

Because of overlapping security domains, it is impossible to have two perimeter security devices (firewalls) in successive layers.