Confidently Practice Online with Free ECSS Exam Cram

Identify the backup mechanism that is performed within the organization using external devices such as hard

disks and requires human interaction to perform the backup operations, thus, making it suspect able to theft or

natural disasters.

Bob, a forensic investigator, is investigating a live Windows system found at a crime scene. In this process,

Bob extracted subkeys containing information such as SAM. Security, and software using an automated tool

called FTK Imager.

Which of the following Windows Registry hives' subkeys provide the above information to Bob?

Messy, a network defender, was hired to secure an organization's internal network. He deployed an IDS in

which the detection process depends on observing and comparing the observed events with the normal

behavior and then detecting any deviation from it.

Identify the type of IDS employed by Messy in the above scenario.

Bob, a forensic investigator, was instructed to review a Windows machine and identify any anonymous

activities performed using it. In this process. Bob used the command “netstat -ano" to view all the active

connections in the system and determined that the connections established by the Tor browser were closed.

Which of the following states of the connections established by Tor indicates that the Tor browser is closed?

Clark, a security professional, was instructed to monitor and continue the backup functions without

interrupting the system or application services. In this process, Clark implemented a backup mechanism that

dynamically backups the data even If the system or application resources are being used.

Which of the following types of backup mechanisms has Clark implemented in the above scenario?