CHFI study guide Completed with 100% Verified Solutions
What is the first step required in preparing a computer for forensics investigation? - ✔✔Do not
turn the computer off or on, run any programs, or attempt to access data on a computer.
True or false?
Network forensics can be defined as the sniffing, recording, acquisition and analysis of the
network traffic and event logs in order to investigate a network security incident. - ✔✔True
What command shows you the names of all open shared files on a server and number of file
locks on each file? - ✔✔Net file
What file contains records that correspond to each deleted file in the Recycle bin? - ✔✔INFO2
file
Which email header specifies an address for mailer-generated errors? - ✔✔Errors-To header
What command shows you all of the network services running on Windows-based servers? -
✔✔Net start