Amber, a black hat hacker, has embedded a malware into a small enticing advertisement and posted it on a popular ad-network that displays across various websites. What is she doing?

Compromising a legitimate site 1

Spearphishmg

Click-jacking

Malvertislng

Which of the following methods of mobile device data acquisition captures ail the data present on the device, as weli as all deleted data and access to unallocated space?

An EC2 instance storing critical data of a company got infected with malware. The forensics team took the EBS volume snapshot of the affected instance to perform further analysis and collected other data of evidentiary value. What should be their next step?

Which of the following are small pieces of data sent from a website and stored on the user’s computer by the user's web browser to track,validate, and maintain specific user information?

POP3 is an Internet protocol used to retrieve emails from a mail server. Through which port does an email client connect with a POP3 server?

To which phase of the computer forensics investigation process does "planning and budgeting of a forensics lab" belong?

................ allows a forensic investigator to identify the missing links during investigation,

What command-line tool enables forensic investigator to establish communication between an Android device and a forensic workstation in order to perform data acquisition from the device?

Which ISO standard enables laboratories to demonstrate that they comply with quality assurance and provide valid results?

Sally accessed the computer system that holds trade secrets of the company where she is employed. She knows she accessed it without authorization and all access (authorized and unauthorized) to this computer is monitored.To cover her tracks. Sally deleted the log entries on this computer. What among the following best describes her action?

Storage location of Recycle Bin for NTFS file systems (Windows Vista and later) is located at:

in a Filesystem Hierarchy Standard (FHS), which of the following directories contains the binary files required for working?

Williamson is a forensic investigator. While investigating a case of data breach at a company, he is maintaining a document that records derails such as the forensic processes applied on the collected evidence, particulars of people handling it, the dates and times when it is being handled, and the place of storage of the evidence. What do you call this document?

ISO/IEC 17025 is an accreditation for which of the following:

Derrick, a forensic specialist, was investigating an active computer that was executing various processes. Derrick wanted to check whether this system was used in an incident that occurred earlier. He started inspecting and gathering the contents of RAM, cache, and DLLs to identify incident signatures, identify the data acquisition method employed by Derrick in the above scenario.

To understand the impact of a malicious program after the booting process and to collect recent information from the disk partition, an investigator should evaluate the content of the:

Which command can provide investigators with details of all the loaded modules on a Linux-based system?

The working of the Tor browser is based on which of the following concepts?

An investigator is examining a file to identify any potentially malicious content. To avoid code execution and still be able to uncover hidden indicators of compromise (IOC ), which type of examination should the investigator perform: