All the Information about the user activity on the network, like details about login and logoff
attempts, is collected in the security log of the computer. When a user’s login is successful,
successful audits generate an entry whereas unsuccessful audits generate an entry for failed login
attempts in the logon event ID table.
In the logon event ID table, which event ID entry (number) represents a successful logging on to a
computer?

What is the first step that needs to be carried out to investigate wireless attacks?

Which of the following commands shows you the username and IP address used to access the
system via a remote login session and the Type of client from which they are accessing the
system?

Why is it Important to consider health and safety factors in the work carried out at all stages of the
forensic process conducted by the forensic analysts?

SMTP (Simple Mail Transfer protocol) receives outgoing mail from clients and validates source
and destination addresses, and also sends and receives emails to and from other SMTP servers.

When NTFS Is formatted, the format program assigns the __________ sectors to the boot sectors
and to the bootstrap code

What is the goal of forensic science?

Smith, an employee of a reputed forensic Investigation firm, has been hired by a private
organization to investigate a laptop that is suspected to be involved in hacking of organization DC
server. Smith wants to find all the values typed into the Run box in the Start menu. Which of the
following registry key Smith will check to find the above information?

Shortcuts are the files with the extension .Ink that are created and are accessed by the users.
These files provide you with information about:

When the operating system marks cluster as used, but does not allocate them to any file, such
clusters are known as ___________.