A suspect is accused of violating the acceptable use of computing resources, as he has visited
adult websites and downloaded images. The investigator wants to demonstrate that the suspect
did indeed visit these sites. However, the suspect has cleared the search history and emptied the
cookie cache. Moreover, he has removed any images he might have downloadeD. What can the
investigator do to prove the violation? Choose the most feasible option.

A (n) ____________ is one thats performed by a computer program rather than the attacker
manually performing the steps in the attack sequence.

The offset in a hexadecimal code is:

It takes _____________ mismanaged case/s to ruin your professional reputation as a computer
forensics examiner?

With the standard Linux second extended file system (Ext2fs), a file is deleted when the inode
internal link count reaches ________.

When examining the log files from a Windows IIS Web Server, how often is a new log file created?

Which part of the Windows Registry contains the users password file?

An employee is attempting to wipe out data stored on a couple of compact discs (CDs) and digital
video discs (DVDs) by using a large magnet. You inform him that this method will not be effective
in wiping out the data because CDs and DVDs are ______________ media used to store large
amounts of data and are not affected by the magnet.

Lance wants to place a honeypot on his network. Which of the following would be your
recommendations?

What does the acronym POST mean as it relates to a PC?