Chfi

Front 1

_______ is a service organization that is responsible for receiving, reviewing, and responding to computer security incident reports and activities

Back 1

CSIRT (Computer Security Incident Response Team)

(Book 1, p. 115)

Front 2

According to the National Industrial Security Program Operating Manual (NISPOM), what is an unclassified short name referring to investigations and studies of compromising emanations?

Back 2

TEMPEST

Front 3

____ evidence is data relevant to an investigation that is transferred by or stored on an electronic device

Back 3

Electronic

Front 4

All evidence collected should be marked as exhibits using this format: ____,

Back 4

aaa/ddmmyy/nnnn/zz

• aaa are the initials of the forensic analyst or law enforcement officer seizing the equipment

• ddmmyy is the date of the seizure

• nnnn is the sequential number of the exhibits seized by the analyst, starting with 001

• zz is the sequence number for parts of the same exhibit.

Front 5

____ involves a perpetrator changing existing computer programs by either modifying them or inserting new programs and routines. ie. Trojan Horse

Back 5

Program manipulation fraud

Front 6

Which of the following refers to a bit-by-bit copy of the original storage medium?

Back 6

Bit-stream copy

(Book 1 p. 62)

Front 7

The ____ is the person responsible for the establishment and maintenance of security required for risk management.

Back 7

information system security manager (ISSM)

(Book 1 p. 117)

Front 8

A(n) ____ is a report that provides detailed information on the complete forensic investigation process

Back 8

investigative report

(Book 1 p. 146)

Front 9

____ security is threatened if there are any governmental problems, improper management, economic slowdown, or other nationwide issues.

Back 9

National

(Book 1 p. 8)

Front 10

____ is a procedure that handles or controls all authorized changes to assets such as software and hardware.

Back 10

Change control

(Book 1 p. 109)

Front 11

What procedures are involved in creating a First Responder Toolkit?

Back 11

1. Create a trusted forensic computer or test bed.

2. Document the details of the forensic computer.

3. Document the summary of collected tools.

4. Test the tools

(Book 1 p. 79 - 81)

Front 12

What devices allow a forensic investigator to copy a suspect hard drive to a clean hard drive very quickly?

Back 12

RAIDs (Rapid action imaging devices)

(Book 1 p. 39)

Front 13

The ____ is a methodology of investigating criminal activity that uses a holistic approach to look at any criminal activity as a piece of a criminal operation rather than as a single criminal act.

Back 13

ETI (Enterprise Theory of Investigation)

(Book 1 p. 23)

Front 14

What term defines an empirically proven set of methods for performing a task in the best and most efficient way?

Back 14

Best practices

(Book 1 p. 60)

Front 15

What does a Chain-of-Custody document contain?

Back 15

• Case number
  
• Name, title, address, and telephone of person from whom evidence was received.
• Location where obtained.
• Reason for evidence being obtained.
• Date/time evidence was obtained.
• Item number/quantity/description.
• Name of evidence.
• Color
• Manufacturing company name.
• Marking information.
• Packaging information.

(Book 1 p. 96)

Front 16

____ evidence includes the date and time the investigator visited the incident site and with whom the investigator spoke.

Back 16

General

(Book 1 p. 154)

Front 17

____ evidence includes pictures of the incident site, maps, X-rays, diagrams and floor plans.

Back 17

Physical and demonstrative evidence.

(Book 1 p. 155)

Front 18

____ evidence includes oral evidence presented by a competent eye witness. It includes testimony from all persons interviewed by the investigator in order of the date and time of the interview.

Back 18

Testimonial evidence.

(Book 1 p. 155)

Front 19

An attorney should prepare a document called a(n) ____. This document contains expected questions and relevant answers, and it guides the investigator.

Back 19

Examination plan

(Book 1 p. 148)

Front 20

Incident ____ involves not only responding to incidents but also triggering alerts to prevent potential risks and threats

Back 20

management

(Book 1 p. 107)

Front 21

What is the art and process of hiding information by embedding messages in other, seemingly harmless messages?

Back 21

Steganography

(Book 1 p. 66)

Front 22

What is a disk-forensic DOS tool designed to emulate and extend the capabilities of DOS to meet forensic needs?

Back 22

Drivespy

(Book 1 p. 63)

Front 23

What item helps an investigator categorize stored equipment so that it can be preserved well and easily located during an investigation?

Back 23

Safe locker and storage shelf

(Book 1 p. 34)

Front 24

Investigators should not destroy the written informal report if produced; this act is considered destruction or concealment of evidence, which in legal terms is known as ____.

Back 24

spoliation

(Book 1, p. 149)

Front 25

____ photographs are overlapping photographs depicting the entire crime scene.

Back 25

360-degree

(Book 1, p. 90)

Front 26

What command displays the mappings between different layers of the network architecture?

Back 26

arp

(Book 1, p. 59)

Front 27

What command displays active TCP connections, ethernet statistics and the IP routing table.

Back 27

netstat

(Book 1, p. 59)

Front 28

What command shows all the files currently open?

Back 28

lsof (list of open files)

(Book 1, p. 59)

Front 29

What command examines each and every patch in the computer?

Back 29

/dev/mem and /dev/kmem

(Book 1, p. 59)

Front 30

What commands is used to run processes?

Back 30

ps or the /proc file system

(Book 1, p. 59)

Front 31

Evidence storage containers or cabinets should be made of what material?

Back 31

Steel

(Book 1, p. 33)

Front 32

____ is when a person or program, acting on behalf of another person, performs an invalid action.

Back 32

Repudiation

(Book 1, p. 102)

Front 33

____ metadata is stored outside the file and identifies the location of a file. It also includes information about filenames, dates, locations, sizes, and so on.

Back 33

System

(Book 1, p. 154)

Front 34

____ is memory that retains its information even when the computer is turned off by connecting it to a battery source.

Back 34

NVRAM

(Book 2, p. 70)

Front 35

Name a tool which allows an investigator to dump the contents of process memory without stopping the process.

Back 35

PMDump

(Book 2, p. 97)

Front 36

What may be used to extract IDs of running processes, the number of threads per process, and the executable path?

Back 36

System Scanner

(Book 2, p. 147)

Front 37

____ is a built-in Windows tool that searches for unsigned drivers on a system.

Back 37

Sigverif

(Book 2, p. 146)

Front 38

What is an event that threatens the security of a computer system or network in an organization?

Back 38

Incident

(Book 1, p. 49)

Front 39

What is the preliminary requirement for an investigation team?

Back 39

A skilled technician is on the team.

(Book 1, p. 51)

Front 40

What is the second foremost requirement for an investigation team?

Back 40

A workstation or data recovery lab.

(Book 1, p. 51)

Front 41

In order to hide a message within an image, what technique may be utilized to hide a bit from the message in the right-most binary bit?

Back 41

Least Significant Bit (LSB)

(Book 3, p. 6)

Front 42

When logging is enabled, Windows Firewall logs are stored in ____.

Back 42

%SystemRoot%\pfirewall.log

(Book 2, p. 134)

Front 43

In Linux, files that are deleted using the command ____ remain on the disk.

Back 43

/bin/rm

(Book 3, p. 97)

Front 44

____ contains the colors in RGB, but only the colors used by the image.

Back 44

Indexed color

(Book 3, p. 121)

Front 45

GIF uses ____ data compression techniques, which maintain the visual quality of the image.

Back 45

lossless

(Book 3, p. 122)

Front 46

The ____ feature of the Image MASSter Solo-3 software can be used to hide and protect part of a drive from the operating system and file system.

Back 46

DCO

(Book 3, p. 45)

Front 47

R-Linux uses a unique ____ technology and a flexible parameter setting that gives the investigator control over the data recovery.

Back 47

IntelligentScan

(Book 3, p. 102)

Front 48

Looking for pieces of a file is known as ____, and in some parts of North America it is called carving.

Back 48

Salvaging

(Book 3, p. 132)

Front 49

LinkMASSter-2 uses write protection and supports MD5, CRC-32, and ____ hashing to ensure data integrity.

Back 49

SHA-1

(Book 3, p. 44)

Front 50

Which of the following is a solid-state electronic flash memory data storage device?

Back 50

Flash memory cards

(Book 2, p. 47)

Front 51

SD cards usually come preformatted with what file system?

Back 51

FAT32

(Book 2, p. 47)

Front 52

____ is a method of compressing files designed by Phil Katz.

Back 52

.zip

(Book 3, p. 128)

Front 53

____ attacks apply techniques such as compression, filtering, resizing, printing, and scanning to remove the watermark.

Back 53

Signal processing

(Book 3, p. 16)

Front 54

____ is defined as "the fraudulent conversion of property of another by a person in lawful possession of that property.

Back 54

Embezzlement

(Book 1, p. 19)

Front 55

____ manipulates punctuation to hide messages.

Back 55

Syntactic

(Book 3, p. 8)

Front 56

____ is an architecture-independent PowerPC emulator that can run most PowerPC operating systems.

Back 56

PearPC

(need citation)

Front 57

The process of file ____ involves locating the data on the disk partitions and allowing the operating system to access the file.

Back 57

undeletion

(Book 3, p. 97)

Front 58

____ is a data duplication software tool that provides access to remote drives through serial cables or TCP/IP.

Back 58

DriveLook

(Book 3, p. 48)

Front 59

JPEG 2000 employs ____ technology so images can be better compressed without affecting quality of an image.

Back 59

Wavelet

(Book 3, p. 125)

Front 60

What program can be used to monitor changes to the registry as they occur?

Back 60

Registry Monitor

(Book 2, p. 36)

Front 61

What is the maximum capacity of a single-sided, single-layer DVD (DVD-5)?

Back 61

4.7 GB

(Book 2, p. 44)

Front 62

In Windows, each hard disk has a hidden folder named ____. This folder contains the files deleted from Windows Explorer or My Computer.

Back 62

Recycled (in FAT systems)

(Book 3, p. 95)

Front 63

____ uses an algorithm to find out if the data can be disregarded based on vectors that are present in the image file.

Back 63

Vector quantization

(Book 3, p. 131)

Front 64

Recycled files on the NTFS system are categorized into directories named as C:\RECYCLER\S-...., based on the user's Windows ____

Back 64

SID

(Book 3, p. 95)

Front 65

Active@ ____ is a DOS-based solution designed for complete backup and restoration of the whole HDD, as well as the particular FAT/NTFS partitions and logical drives.

Back 65

Disk Image

(Book 3, p. 110)

Front 66

The DriveSpy ____ command is used to regenerate information acquired through the SaveSect command.

Back 66

WriteSect

(Book 3, p. 40)

Front 67

SafeBack ensures data integrity using ____.

Back 67

CRC-32

(Book 3, p. 44)

Front 68

____ allows an investigator to synchronize and backup files from a source folder on one computer to a target folder on a second networked computer or local storage device.

Back 68

Save-N-Sync

(Book 3, p. 49)

Front 69

NTFS partitioning rules start the first primary partition in the ____ sector

Back 69

64th

(need citation)

Front 70

The LinkMASSter-2 ____ option provides a quick non-DoD method of sanitizing a drive of all previously stored data.

Back 70

WipeOut fast

(Book 3, p. 46)

Front 71

____ is a lossless data compression algorithm that combines the string of same byte values into the single code word.

Back 71

LZW

(Book 3, p. 130)

Front 72

The MD5 hash is a ____-bit value that uniquely describes the contents of a file.

Back 72

128 (16 byte)

(Book 3, p. 80)

Front 73

The event log header is contained in the first ____ bytes of a valid event log file.

Back 73

48

(Book 2, p. 129)

Front 74

____ is the medium used to hide the message.

Back 74

Cover medium

(Book 3, p. 2)

Front 75

A ____ is a noninteractive program that helps the operating system and applications perform their tasks.

Back 75

Service

(Book 2, p. 85)

Front 76

The EnCase ____ search utility enables the investigator to search for information with a known general format, such as any telephone numbers, credit card numbers, network IDs, logon records, or IP addresses, even when the specific number is not known.

Back 76

GREP (Global Regular Expressions Post)

(Book 3, pp. 70-71)

Front 77

____ use geometrical shapes and primitives, such as points, lines, curves, and polygons, based upon mathematical equations, in order to represent images in a computer.

Back 77

Vector images

(Book 3, p. 121)

Front 78

What does a user usually read before signing on to a system in which the user's responsibilities while using the system are stated?

Back 78

Warning banner

(Book 1, pp. 54-55)

Front 79

Booting is also known as_____

Back 79

Bootstrapping

(Book 2, p. 54)

Front 80

____ is a well-defined mathematical function that converts a large variable-sized amount of data into a small fixed-length integer that may serve as an index into an array, as a method obscuring and protecting passwords being transferred over a network, or to verify the integrity of stored data.

Back 80

Hashing

(Book 2, p. 65)

Front 81

____ creates a change in the cover object in order to hide the information. An encoder performs a sequence of modifications to the cover that corresponds to a secret message.

Back 81

Distortion

(Book 3, p. 8)

Front 82

The ____ command shows not only the names of the users accessing the system via a remote login session but also the IP addresses and the types of clients from which they are accessing the system.

Back 82

Net Sessions

(Book 2, p. 78)

Front 83

The main function of the DriveSpy ____ command is to restore an image of a partition.

Back 83

WritePart

(Book 3, p. 41)

Front 84

What is a NAND-type flash memory data storage device integrated with a USB 1.1 or 2.0 interface?

Back 84

USB flash drive

(Book 2, p. 48)

Front 85

____ is any ominous or improper behavior where cyber criminals use the Internet and other communication methods to victimize people.

Back 85

Cyber stalking

(Book 1, p. 16)

Front 86

A ____ is a set of host machines in a relatively contiguous area, allowing for high data transfer rates among hosts on the same IP network.

Back 86

LAN

(Book 4, p. 28)

Front 87

____ is a link-state routing protocol used to manage router information based on the state (i.e., speed, bandwidth, congestion, and distance) of the various links between the source and destination.

Back 87

Open Shortest Path First (OSPF)

(Book 4, p. 102)

Front 88

____ is a parental control tool, developed specially for protecting children from forbidden materials such as pornography, online gambling, and online drug information.

Back 88

Web Control for Parents

(Book 4, p. 286)

Front 89

The ____ attempts to eliminate discrimination involving sexual harassment in the workplace, educational institutions, and other public areas.

Back 89

Australian Sex Discrimination Act of 1984

(Book 4, p. 269)

Front 90

____ are the primary recorders of a user's activity on a system and of network activities.

Back 90

Log files

(Book 4, p. 4)

Front 91

____ mode is the mode of a network interface card in which the card passes all network traffic it receives to the host computer, rather than only the traffic specifically addressed to it.

Back 91

Promiscuous

(Book 4, p. 35)

Front 92

A(n) ____ investigation tracks all elements of an attack, including how the attack began, what intermediate devices were used during the attack, and who was attacked.

Back 92

End-to-end

(Book 4, p. 4)

Front 93

____ is the intentional act of sending multiple copies of identical content to the same recipient.

Back 93

Mail storming

(Book 4, p. 179)

Front 94

____ is a protocol used to manage router information within a self-contained network. It is limited in that it allows only 15 hops in the path from source to destination.

Back 94

RIP

(Book 4, p. 102)

Front 95

The ____ provides appropriate remedies for intentional discrimination and unlawful harassment in the workplace.

Back 95

Civil Rights Act of 1991

(Book 4, p. 267)

Front 96

____ is an Internet protocol for transmitting e-mail over IP networks.

Back 96

Simple Mail Transfer Protocol (SMTP)

(Book 4, p. 176)

Front 97

____ is a lossless image format intended to replace the GIF and TIFF formats.

Back 97

PNG

(Book 3, p. 126)

Front 98

____ is an Internet protocol designed for accessing e-mail on a mail server.

Back 98

Internet Message Access Protocol (IMAP)

(Book 4, p. 176)

Front 99

____ is the standard protocol for distributing and recovering Usenet messages.

Back 99

Network News Transfer Protocol (NNTP)

(Book 4, p. 32)

Front 100

A ____ is a section or instance of an application or program that is being run sequentially.

Back 100

process

(Book 2, p. 79)

Front 101

The fraggle A(n) ____ is an identifier string that indicates where a resource is located and the mechanism needed to retrieve it.attack is a UDP variant of the ____ attack.

Back 101

Smurf

(Book 4, p. 125)

Front 102

A(n) ____ is an identifier string that indicates where a resource is located and the mechanism needed to retrieve it.

Back 102

URL

(Book 4, p. 67)

Front 103

____ is the entity that oversees global IP address allocation, DNS root zone management, media types, and other Internet protocol assignments.

Back 103

Internet Assigned Numbers Authority (IANA)

(Book 4, p.156)

Front 104

____ is the first line of defense for verifying and tracking the legitimate use of a Web application.

Back 104

Authentication

(Book 4, p. 69)

Front 105

According to the USPTO, a ____ mark is any word, name, symbol, device, or any combination, used, or intended to be used, in commerce, to identify and distinguish the services of one provider from services provided by others, and to indicate the source of the services

Back 105

service

(Book 4, p. 220)

Front 106

In a(n) ____ attack, when a user sends any application to the server, an attacker hacks the application and adds malicious code.

Back 106

code injection

(Book 4, p. 66)

Front 107

The term ____ espionage is used to describe espionage for commercial purposes.

Back 107

corporate

(Book 4, p. 200)

Front 108

EnCase calculates a(n) ____ hash when it acquires a physical drive or logical drive.

Back 108

MD5

(Book 3, p. 65)

Front 109

What is the next-generation optical media patented by Sony?

Back 109

Blu-ray

(Book 2, p. 45)

Front 110

A ____ is a property right granted to the inventor by the USPTO to keep others from making, using, or selling the invention without authorization.

Back 110

patent

(Book 4, p. 231)

Front 111

In general, copyrights for works that are published after 1977 are valid for the life span of the author plus another ____ years.

Back 111

70

(Book 4, p. 225)

Front 112

Since the introduction of the Internet, hidden messages inside digital images have become the most common and highly effective form of ____.

Back 112

steganography

(Book 3, p. 137)

Front 113

____ contains the colors in RGB, but only the colors used by the image.

Back 113

Indexed color

(Book 3, p. 121)

Front 114

The ____ state is the sleep mode of the PDA device, which conserves battery power to maintain the user's data and perform other background activities.

Back 114

quiescent

(ppt 5, slide 15)

Front 115

In Palm OS, the total available RAM is divided into two areas: dynamic RAM and ____ RAM.

Back 115

storage

(ppt 5, slide 8)

Front 116

____ is a type of function that takes a quantity of data of any size and produces an output of a fixed length, usually a 32-bit integer that is generally used to verify the integrity of the original data.

Back 116

Cyclic Redundancy Check (CRC)

(Book 3, p. 64)

Front 117

____ is a powerful tool that extracts network packets and performs statistical analysis on those dumps.

Back 117

Tcpdump

(Book 4, p. 40)

Front 118

According to the USPTO, a ____ mark is a trademark or service mark used or intended to be used, in commerce, by the members of a cooperative, an association, or other collective group or organization, including a mark, which indicates membership in a union, an association, or other organization.

Back 118

collective

(Book 4, p. 220)

Front 119

____ logs provide information about the router's activities.

Back 119

Router

(Book 4, p. 112)

Front 120

An e-mail client connects to an IMAP server via port ____.

Back 120

143

(Book 4, p. 176)

Front 121

____ attacks on wireless networks are similar to those on wired networks, in which an attacker tries to alter or corrupt the data or services on a network.

Back 121

Active

(Book 2, p. 211)

Front 122

____ is a small, command-line utility for Windows that will break apart any JPEG file and generate the HTML code needed to reconstruct the picture.

Back 122

2Mosiac

(Book 3, p. 21)

Front 123

____ hide information through the use of signs or symbols.

Back 123

Semagrams

(Book 3, p. 5)

Front 124

A ____ is a database that stores the most efficient routes to particular network destinations.

Back 124

routing table

(Book 4, p. 102)

Front 125

iPods formatted with Mac computers use Apple's ____ file system, while those formatted on Windows use the FAT32 file system.

Back 125

HFS+

(Book 2, p. 47)

Front 126

____ is a vulnerability-assessment product that scans Web servers to identify security problems and weaknesses.

Back 126

N-Stealth

(Book 4, p. 83)

Front 127

Modern BlackBerry devices have ARM7 or ____ processors

Back 127

ARM9

(ppt 5, chapter 4, slide 4)

Front 128

The iPhone OS is derived from Mac OS X, uses the ____ foundation, and uses less than 300 MB of the device's total memory storage.

Back 128

Darwin

(ppt 5, chapter 3, slide 9)

Front 129

With ____, an administrator gives a piece of data to a person and if that information makes it out to the public domain, the administrator knows the organization has a mole.

Back 129

mole detection

(Book 4, p. 206)

Front 130

____ is an application-layer hacking method used for hacking Web applications.

Back 130

Cross-site scripting (XSS)

(Book 4, p. 63)

Front 131

What is the first piece of information an investigator should collect when investigating an incident?

Back 131

System time

(Book 2, p. 77)

Front 132

What is the command to view system time?

Back 132

time /t

(Book 2, p. 77)

Front 133

What command may be used to view cached NetBIOS names on the operating system?

Back 133

nbtstat -c

(Book 2, p. 78)

Front 134

What does Internet Explorer use as a database that is active as long as a user is logged on in Windows?

Back 134

index.dat

(Book 2, p. 87)

Front 135

What technique is used to capture information passing through a wireless network?

Back 135

Whacking

(Book 4, p. 203)

Front 136

The BlackBerry Enterprise Solution provides AES and ____ encryption techniques

Back 136

Triple DES

Front 137

The ____ enables developers to protect the data and intellectual property of their applications.

Back 137

BlackBerry Signing Authority Tool

Front 138

The ____ command displays a partition table listing the breakpoints between application memory and file system memory.

Back 138

alloc

Front 139

____ involves using chalk to place a special symbol on a sidewalk or another surface to indicate a nearby wireless network that offers Internet access

Back 139

Warchalking

(Book 2, p. 211)

Front 140

According to the USPTO, a ____ is a form of protection provided to the authors of "original works of authorship" including literary, dramatic, musical, artistic, and certain other intellectual works, both published and unpublished.

Back 140

copyright

(Book 4, p. 224)

Front 141

____ is completely passive and is capable of detecting traffic from WAPs and wireless clients. It works on both open and closed networks.

Back 141

Kismet

(Book 2, p. 217)

Front 142

The iPhone OS ____ layer provides the kernel environment, drivers, and basic interfaces of the operating system.

Back 142

core OS

Front 143

____ cards are used primarily in digital cameras, particularly those made by Olympus and Fujifilm, developers of the format.

Back 143

xD-Picture

Front 144

A(n) ____ is defined as the average packet rate of data packets with similar packet header information.

Back 144

activity profiling

(Book 4, p. 131)

Front 145

Memory in Palm OS is arranged in chunks known as ____.

Back 145

Records

(PPT slide Book 5, slide 8)

Front 146

____ is a Windows NT/2000/XP file undelete utility that can recover accidentally deleted files.

Back 146

File Scavenger

(PPT slide Book 3, slide 21)

Front 147

In a ____ attack, an attacker sends a fake TCP SYN packet with the same source and destination IP addresses and ports to a host computer.

Back 147

LAND

(Book 4, p. 124)

Front 148

A(n) ____ file is a proprietary file created by EnCase to compress and preserve bit-stream images of acquired media.

Back 148

evidence

(Book 3, p. 64)

Front 149

BlackBerry ____ Protocol backs up, restores, and synchronizes the data between BlackBerry devices and desktop systems.

Back 149

serial

(PPT slide, Book 5, Ch 4, slide 7)

Front 150

In a(n) ____ attack, the attacker modifies the contents of a cookie to steal personal information about a user or defraud Web sites.

Back 150

cookie poisoning

(Book 4, p. 66)

Front 151

____ is the process of synchronizing elements between a Palm handheld device and a desktop PC.

Back 151

HotSync

(PPT slide, Book 5, Ch 2, slide 17)

Front 152

____ is a Windows NT/2000/XP file undelete utility that can recover accidentally deleted files.

Back 152

File Scavenger

Front 153

The iPhone OS ____ layer provides graphics and media technologies such as Core Audio, OpenAL, and video technologies.

Back 153

media

Front 154

In Windows CE, the ____ layer contains the OEM adaptation layer (OAL), drivers, and configuration files.

Back 154

OEM

https://pravinmohite.wordpress.com/2007/08/16/windows-ce-architecture/

Front 155

The master boot record (MBR) resides at the ____ sector.

Back 155

First

(Book 2, p. 12)

Front 156

The process of file ____ involves locating the data on the disk partitions and allowing the operating system to access the file.

Back 156

undeletion

(Book 3, p. 97)

Front 157

The ____ tool attempts to confuse the connected wireless devices by sending deauthentication packets.

Back 157

Aireplay

(Book 2, p. 222)

Front 158

A ____ party is an individual or business who used a particular work when the status of the work was in the public domain, prior to the URAA agreement.

Back 158

reliance

(Book 4, p. 225)

Front 159

The iPhone OS ____ layer provides the fundamental services for applications such as Address Book, Core Location, CFNetwork, Security, and SQLite.

Back 159

core services

Front 160

The ____ tool allows the attacker to use a BlackBerry device as a proxy between the Internet and the internal network.

Back 160

BBProxy

Front 161

The ____ command displays detailed flash RAM and SRAM maps.

Back 161

map

Front 162

____ is the process of tracking unauthorized activity using techniques such as inspecting user actions, security logs, or audit data.

Back 162

Intrusion detection

(Book 4, p. 6)

Front 163

The term ____ refers to the process of taking a password hash and attempting to determine the associated password that generated that password hash.

Back 163

password cracking

(Book 4, p. 140)

Front 164

BlackBerry software development was originally based on ____, but the latest models support MDS and Java.

Back 164

C++

(PPT slide, Book 5, Chapter 4, slide 5)

Front 165

____ is an application that helps in recovering corrupted or lost data fully from floppy disk, CD, CD-R, CD-RW, digital media, and Zip drives or disks.

Back 165

BadCopy Pro

Front 166

A(n) ____ is the encroachment on another's right or privilege.

Back 166

infringement

Front 167

A ____ is simply a shorthand way of referring to an object.

Back 167

handle

Front 168

____ detects wireless devices and calculates their signal strength. It implements a modularn-tier architecture with data collection at the bottom tier and a graphical user interface at the top.

Back 168

Airfart

Front 169

The ____ event log records events relating to system behavior, including changes to the operating system, changes to the hardware configuration, device driver installation, the starting and stopping of services, and a host of other items of potential investigative interest.

Back 169

system

Front 170

____ is a technique to garble a message in such a way that the meaning of the message is changed.

Back 170

Cryptography

Front 171

____ forensics is the application of scientific and legally sound methods for the investigation of Internet crimes, whose focus ranges from an individual system to the Internet at large.

Back 171

Internet

(Book 4, p. 151)

Front 172

____ is an incident in which a system does not behave in the expected manner.

Back 172

Subversion

(Book 1, p. 103)

Front 173

____ is a federal law that addresses concerns about access to offensive content over the Internet on school and library computers.

Back 173

CIPA (Children's Internet Protection Act)

(Book 4, p. 297)

Front 174

____ is defined as "any illegal act that involves a computer, its systems, or its applications."

Back 174

Cyber crime

(Book 1, p. 13)

Front 175

The iPod Touch uses the ____ OS as its operating system.

Back 175

iPhone

(PPT slide, Book 5, Chapter 3, slide 4)

Front 176

The ____ is an Internet-connected multimedia device with a multitouch screen.

Back 176

iPhone

(PPT slide, Book 5, Chapter 3, slide 6)

Front 177

In Palm OS, ____ RAM is analogous to the RAM installed on desktop computers, and it is used as space for temporary allocation.

Back 177

dynamic

Front 178

JPEG 2000 employs ____ technology so images can be better compressed without affecting quality of an image.

Back 178

wavelet

(Book 3, p. 125)

Front 179

____ is when a person or program, acting on behalf of another person, performs an invalid action.

Back 179

Repudiation

Front 180

The ____ command writes a hex dump of the flash RAM to FILESYS.DMP in the same directory as Program Loader.

Back 180

savefs

Front 181

The first state of the PDA device when it is received from the manufacturer is the ____ state.

Back 181

nascent