Network Forensics Overview

The three modes of protection in the DiD strategy are people, technology, and operations

• True

• False

A layered network defense strategy puts the most valuable data where?

• In the DMZ

• In the outermost layer

• In the innermost layer

• None of the above

Tcpslice can be used to retrieve specific timeframes of packet captures.

• True

• False

Packet analyzers examine what layers of the OSI model?

• Layers 2 and 4

• Layers 4 through 7

• Layers 2 and 3

• All layers

When do zero day attacks occur?

• On the day the application or OS is released

• Before the vendor is aware of the vulnerability

• On the day a patch is created