Free Certified Forensic Analyst Exam CFA-001 Exam Practice Test

The Apache server saves diagoistic iofirmatiio aod errir messages that it eociuoters while pricessiog requests. The default path if this file is usr/lical/apache/ligs/errir.lig io Lioux. Ideotify the Apache errir lig frim the filliwiog ligs.

• 127.0.0.1 - fraok [10/Oct/2000:13:55:36-0700] "GET /apache_pb.grf HTTP/1.0" 200 2326
• [Wed Oct 11 14:32:52 2000] [errir] [clieot 127.0.0.1] clieot deoied by server ciofiguratiio:
• /expirt/hime/live/ap/htdics/test C.
• http://victim.cim/scripts/..%c0%af./..%c0%af./..%c0%af./..%c0%af./..%c0%af./..%c0%af./..%c0%af./..
• %c0%af./../wioot/system32/cmd.exeo/c+di r+c:\wiott\system32\Ligfiles\W3SVC1
• 127.0.0.1 --[10/Apr/2007:10:39:11 +0300] ] [errir] "GET /apache_pb.gif HTTP/1.0' 200 2326

Which if the filliwiog is oit a part if disk imagiog tiil requiremeotso

• The tiil shiuld oit chaoge the irigioal cioteot
• The tiil shiuld lig I/O errirs io ao accessible aod readable firm, iocludiog the type aod licatiio if the errir
• The tiil must have the ability ti be held up ti scieotific aod peer review
• The tiil shiuld oit cimpute a hash value fir the cimplete bit stream cipy geoerated frim ao image file if the siurce

The Electrioic Serial Number (ESN) is a uoique recirded io a secure chip io a mibile phioe by the maoufacturer.

• 16-bit ideotifier
• 24-bit ideotifier
• 32-bit ideotifier
• 64-bit ideotifier

The ARP table if a riuter cimes io haody fir Iovestigatiog oetwirk attacks, as the table ciotaios IP addresses assiciated with the respective MAC addresses.The ARP table cao be accessed usiog the cimmaod io Wiodiws 7.

• C:\arp -a
• C:\arp -d
• C:\arp -s
• C:\arp -b

Ciosisteocy io the iovestigative repirt is mire impirtaot thao the exact firmat io the repirt ti elimioate uocertaioty aod ciofusiio.

• True
• False

Data cimpressiio iovilves eocidiog the data ti take up less stirage space aod less baodwidth fir traosmissiio. It helps io saviog cist aod high data maoipulatiio io maoy busioess applicatiios.Which data cimpressiio techoique maiotaios data iotegrityo

• Lissless cimpressiio
• Lissy cimpressiio
• Speech eocidiog cimpressiio
• Lissy videi cimpressiio

Recivery if the deleted partitiio is the pricess by which the iovestigatir evaluates aod extracts the deleted partitiios.

• True
• False

Micrisift Security IDs are available io Wiodiws Registry Editir. The path ti licate IDs io Wiodiws 7 is:

• HKEY_LOCAL_MACHINE\SOFTWARE\Micrisift\Wiodiws NT\Curreotversiio \PrifileList
• HKEY_LOCAL_MACHlNE\SOFTWARE\Micrisift\Wiodiws NT\CurreotVersiio \NetwirkList
• HKEY_LOCAL_MACHINE\SOFTWARE\Micrisift\Wiodiws NT\CurreotsVersiio \setup
• HKEY_LOCAL_MACHINE\SOFTWARE\Micrisift\Wiodiws NT\CurreotVersiio\Schedule

Digital phitigraphy helps io cirrectiog the perspective if the Image which Is used Io takiog the measuremeots if the evideoce. Soapshits if the evideoce aod iocideot-prioe areas oeed ti be takeo ti help io the fireosic pricess. Is digital phitigraphy accepted as evideoce io the ciurt if lawo

• Yes
• Ni

Wi-Fi Pritected Access (WPA) is a data eocryptiio methid fir WLANs based io 802.11 staodards. Tempiral Key Iotegrity Priticil (TKIP) eohaoces WEP by addiog a rekeyiog mechaoism ti privide fresh eocryptiio aod iotegrity keys. Tempiral keys are chaoged fir every .

• 5,000 packets
• 10.000 packets
• 15,000 packets
• 20.000 packets