Network Forensics

What is the first step in network forensics

• Ask for permission

• Agree on a network-testing methodology

• Assemble a team

• Gather evidence

What is the forensic supervisory and investigatory authority responsible for?

• Building networks

• Hiring IT professionals

• Carrying out IT activities

• Authorizing the activities of the investigators

What network-testing tool can be used to inspect all data packets transferring over the network

• Pen Drive

• Packet Sniffers

• Internet Sniffers

• Scanner

What does agreeing on the network testing methodology mean?

• Agreeing what the investigators can and cannot do

• Agreeing on what evidence to gather

• Agreeing on who can investigate

• All of the above

Network forensics involves the investigation of network traffic in order to identify evidence of a cyber attack

• True

• False

Who do we need to agree the network-testing methodology with?

• The senior management team.

• The forensic supervisory and investigatory authority.

• The head of IT services.

• The board of directors.

By law, does an organisation require permission from users before scanning the communications over its local network?

• Yes

• No

What law allows businesses to monitor traffic on their own network without permission for security purposes

• GDPR

• Data Protection Act

• Fraud Act

• Telecommunications Regulations

Employees or users of a network must be notified that their communications may be monitored.

• True

• False

Tools that monitor the existing traffic on a network over a period of time are called what?

• Active Analysis Tool

• Passive Analysis Tool

• Network Analysis tool