IISFA II0-001 CIFI Exam Practice Test Instant Access

Question 1

A SYN attack exploits what aspect of TCP communications?

AThree-way handshake

BUnilateral communication

CTransport layer communication

DConnectionless oriented communication

Answer : A

Question 2

When handling evidence, which of the following is not a common guideline?

ARemove all suspects away from the computer crime scene.

BContact your local law enforcement immediately

CDocument the crime scene.

DOne must have legal authority to seize and collect the evidence.

Answer : B

Question 3

Which of the following is NOT a necessary step when documenting the crime scene?

AUse the print screen function on the computer to save the disk image on the computer.

BLabel all connections and cables.

CPhotograph the computer and all peripherals attached to the computer.

DPhotograph the building, room and the equipment being seized.

Answer : A

Question 4

Which of the following is not related to Rules of Evidence?

ABelievable

BAuthentic

CComplete

DNon-admissible

Answer : D

Question 5

There are two types of evidence: what are they?

APhysical and Testimonial

BReal and Assumed

CAdmissible and Inadmissible

DThere are more than two types

Answer : A

Question 6

Compression of collected evidence can't be utilized because:

ACompression modifies the original evidence

BComplete drive imaging requires every bit to be identical, there's compression can't be utilized

CCompression can be utilized, but only if CRC on compression sequences are utilized

DCompression of original evidence can be utilized

Answer : D

Question 7

According to IIFS100, the following is the proper sequence for image verification:

AHash original, copy, hash copy, compare hash

BHash on image stream, hash copy, compare hash

CCopy, hash original, hash copy, compare hash

DNone of the above

Answer : A

IISFA II0-001 Certified Information Forensics Investigator CIFI Exam Practice Test