IISFA II0-001 CIFI Exam Practice Test Instant Access

Question 1

Which method is NOT regarded as a prevention technique for IP spoofing:

ANot relying on IP address based authentication

BIntrusion Detection System implementation

CEncryption requirement on all network traffic

DRouter based packet filtering

Answer : C

Question 2

The investigator needs to think about reporting

AWhile the examination is in progress

BAt the end of the investigation

CTo Law Enforcement

DTo the attorney

Answer : A

Question 3

You can show that the evidence was not tampered with by

ALooking at it

BCyclical Check

CMD5 hash of the original and copy

DDocumenting it

Answer : C

Question 4

An investigator should treat each incident

AAs a crime

BAs the last

CAs the best

DAs is appropriate to the times

Answer : A

Question 5

The Best Evidence Rule is

AAlways collect the best evidence

BRequires that the content of a writing be proven by introducing the original or by testimony of
a qualified individual assuring its validity.

CGreat to look at

DEvidence that can't be seen

Answer : B

Question 6

Copies of original evidence, such as disks and other media, are considered what in court unless they are collected during the normal course of business operations?

AHearsay evidence

BCircumstantial evidence

CReal evidence

DNone of the above

Answer : A

Question 7

When handling evidence, which of the following is not a common guideline?

ARemove all suspects away from the computer crime scene.

BContact your local law enforcement immediately

CDocument the crime scene.

DOne must have legal authority to seize and collect the evidence.

Answer : B

IISFA II0-001 Certified Information Forensics Investigator CIFI Exam Practice Test