Loading demo links...
Showing 1–12 of 12 questions
Before touching a suspect system, an analyst's priority is to do what?
Select an option, then click Submit answer.
Which protocol carries web traffic encrypted by TLS?
Select an option, then click Submit answer.
WHOIS data for a suspicious domain most usefully provides what?
Select an option, then click Submit answer.
A SPAN port differs from a traditional TAP because a TAP does what?
Select an option, then click Submit answer.
Static evidence gathering from a powered-off host centres on acquiring what?
Select an option, then click Submit answer.
Basic static malware analysis examines a sample without doing what?
Select an option, then click Submit answer.
Which two support evidential integrity? (Choose two.)
Select all that apply, then click Submit answer.
Which two are asymmetric encryption algorithms? (Choose two.)
Select all that apply, then click Submit answer.
Which two DNS records support email analysis? (Choose two.)
Select all that apply, then click Submit answer.
CORRECT TEXT
The record tracking every person who handled an evidence item is its chain of ______.
Answer is in the explanation below.
DRAG DROP
Match each handling concept to its purpose.
Items to match: Chain of custody, Evidence hashing, Contemporaneous notes, Order of volatility.
Answer is in the explanation below.
DRAG DROP
Match each protocol to its default port.
Items to match: HTTPS, SSH, RDP, SMB.
Answer is in the explanation below.
