NF Quiz#1

You’re investigating a suspicious file download on a corporate network. What’s your first step?

• Analyze the file directly

• Collect network logs and packet captures

• Shut down the entire network

• Interview all employees

A network attack occurred, and you need to preserve evidence. What is the most important factor?

• Prioritize speed over accuracy

• Ensure proper chain of custody

• Block all traffic on the network

• Use free tools without documentation

What kind of evidence is captured during a live analysis?

• Static evidence

• Dynamic evidence

• Physical evidence

• Metadata evidence

You are tasked to analyze a firewall log. What should you focus on to identify a potential intrusion?

• Unusual port usage

• DNS resolution success rates

• User login frequencies

• File size logs

Which step is essential before analyzing packet captures?

• Convert them into a document format

• Verify their integrity and authenticity

• Filter out small packets

• Compress the file

A network tap is most useful for which activity?

• Creating static disk images

• Capturing and preserving live network traffic

• Securing the physical premises

• Training forensic analysts

If different systems record events with varying time stamps, what action should you take?

• Ignore time discrepancies

• Synchronize logs to a common time reference

• Focus only on logs with exact times

• Collect new logs with identical formats

Which component provides the best insight into historical network activity?

• Real-time monitoring tools

• Log files from routers and firewalls

• Encrypted traffic data

• Session key generators

An ethical concern arises during an investigation. How should it be handled?

• Ignore ethical guidelines to expedite the process

• Prioritize transparency and privacy rights

• Share findings without encryption

• Store evidence in non-secure locations

A company uses an online banking website to process transactions. Which OSI layer is responsible for handling the communication between the user’s web browser and the banking application?

• Presentation Layer

• Application Layer

• Transport Layer

• Session Layer