IISFA II0-001 CIFI Exam Practice Test Instant Access

Question 1

A SYN attack exploits what aspect of TCP communications?

AThree-way handshake

BUnilateral communication

CTransport layer communication

DConnectionless oriented communication

Answer : A

Question 2

When handling evidence, which of the following is not a common guideline?

ARemove all suspects away from the computer crime scene.

BContact your local law enforcement immediately

CDocument the crime scene.

DOne must have legal authority to seize and collect the evidence.

Answer : B

Question 3

Which of the following is NOT a necessary step when documenting the crime scene?

AUse the print screen function on the computer to save the disk image on the computer.

BLabel all connections and cables.

CPhotograph the computer and all peripherals attached to the computer.

DPhotograph the building, room and the equipment being seized.

Answer : A

Question 4

Which of the following is not related to Rules of Evidence?

ABelievable

BAuthentic

CComplete

DNon-admissible

Answer : D

Question 5

There are two types of evidence: what are they?

APhysical and Testimonial

BReal and Assumed

CAdmissible and Inadmissible

DThere are more than two types

Answer : A

Question 6

What Federal rule requires that all opinions of a witness giving expert testimony in civil litigation be written and signed; and the basis and reasoning therefore be formatted to include the data or other information considered by the witness in forming the opinions; any exhibits to be used as a summary of or support for the opinions, the qualifications of the witness, including a list of all publications authored by the witness in the last 10 years, the compensation to be paid for the study and testimony; and a listing of any other cases in which the witness has testified as an expert at trial or by deposition within the proceeding four years?

AFederal Rule of Civil Procedure 26 Section 2

BFederal Rule of Civil Procedure 28 Section 3

CThere is no such rule

DBoth statutes apply

Answer : A

Question 7

Which of the following represents the data found at a NTFS hard drive, and lasts for 3 bytes?

AOEM ID

BJump Instruction

CBPD

DEnd of sector marker

Answer : B

IISFA II0-001 Certified Information Forensics Investigator CIFI Exam Practice Test