You are assigned to work in the computer forensics lab of a state police agency. While working on a high profile criminal case, you have followed every applicable procedure, however your boss is still concerned that the defense attorney might question wheather evidence has been changed while at the lab. What can you do to prove that the evidence is the same as it was when it first entered the lab?

A. Sign a statement attesting that the evidence is the same as it was when it entered the lab

B. There is no reason to worry about this possible claim because state labs are certified

C. Make MD5 hashes of the evidence and compare it to the standard database developed by NIST

D. Make MD5 hashes of the evidence and compare it with the original MD5 hash that was taken when the evidence first entered the lab

How do you define forensic computing?

A. It is the science of capturing, processing, and investigating data security incidents and making it acceptable to a court of law.

B. It is a methodology of guidelines that deals with the process of cyber investigation

C. It Is a preliminary and mandatory course necessary to pursue and understand fundamental principles of ethical hacking

D. It is the administrative and legal proceeding in the process of forensic investigation

Operating System logs are most beneficial for Identifying or Investigating suspicious activities involving a particular host. Which of the following Operating System logs contains information about operational actions performed by OS components?

A. Event logs

B. Audit logs

C. Firewall logs

D. IDS logs

An attack vector is a path or means by which an attacker can gain access to computer or network resources in order to deliver an attack payload or cause a malicious outcome.

A. True

B. False

Wi-Fi Protected Access (WPA) is a data encryption method for WLANs based on 802.11 standards. Temporal Key Integrity Protocol (TKIP) enhances WEP by adding a rekeying mechanism to provide fresh encryption and integrity keys. Temporal keys are changed for every____________.

A. 5,000 packets

B. 10.000 packets

C. 15,000 packets

D. 20.000 packets