Question Chapter 12C (3of3)

What is the term for the type of library linking where an application's required libraries are identified at compile time and included with the executable binary, resulting in a stand-alone, self-contained executable file?

• Statically Linked

• Dynamically Linked

• Semi-Linked

• Linked Libraries

What vulnerability is associated with dynamically linked libraries that can lead to loading of malicious libraries designed to mimic legitimate ones needed by the application?

• DLL Hijacking

• Library Spoofing

• Library Overloading

• Dependency Injection

What is the main purpose of the dd command line tool in forensics?

• Analyzing file metadata

• Making forensic images of block-level storage

• Creating exact copies of files

• Encrypting files at the block level

How does dd differ from traditional file copying methods?

• It copies files at the block level

• It copies files with encryption

• It copies files at the file level

• It copies files more efficiently

What utility allows interactions with connection tracking systems in the Linux kernel for stateful packet inspection?

• conntrack

• tcpdump

• netstat

• iptables

Which utility records packet captures for further analysis and can save them using the pcap interface?

• iptables

• netstat

• conntrack

• tcpdump

What does the `sha256sum` command-line utility do in Linux?

• Encrypts files

• Analyzes file metadata

• Compares files to identify matches

• Generates SHA-2 hashes with a digest length of 256 bits