IISFA II0-001 CIFI Exam Practice Test Instant Access

Question 1

Which method is NOT regarded as a prevention technique for IP spoofing:

ANot relying on IP address based authentication

BIntrusion Detection System implementation

CEncryption requirement on all network traffic

DRouter based packet filtering

Answer : C

Question 2

Generally, which header is used to reveal reliable information from forged emails:

AReply-to header

BReturn-receipt-to header

CReceived header

DComments header

Answer : C

Question 3

Added "Received:" headers often include bogus information. All of the following items except one, is usually incomplete:

A'To:' header

BIDs

CPath

DDates

Answer : A

Question 4

An advanced application of making use of proxies to hide an IP that makes tracing virtually impossible is called:

ADual homed firewall

BServer hopping

CApplication gateway

DMuliproxing

Answer : B

Question 5

The 1st sector of a hard disk is sometimes called:

AThe partition sector.

BThe FAT (File Allocation Table)

COn hard disks, the first sector is called variously the master boot record, the partition sector,
or the partition table.

DThe boot sector.

Answer : A

Question 6

When collecting a desktop computer system from a crime scene that is powered on and operating what is the correct way of shutting the system down?

AShutdown using the computers operating system.

BReboot and use SAFEMODE to shutdown.

CUnplug computer system from the power source.

DNone of the above

Answer : C

Question 7

A forensic investigator must be familiar with the following:

AFederal and State laws

BGuidelines for Search and Seizure

CPreservation and Collection of Evidence

DAll of the above

Answer : D

IISFA II0-001 Certified Information Forensics Investigator CIFI Exam Practice Test