Online Access Free CFA-001 Practice Test

Which of the following commands shows you all of the network services running on Windows-based servers?

• A.Net share
• B.Net Session
• C.Net start
• D.Net use

Windows Security Event Log contains records of login/logout activity or other security-related events specified by the system's audit policy. What does event ID 531 in Windows Security Event Log indicates?

• A.The logon attempt was made with an unknown user name or a known user name with a bad password
• B.A logon attempt was made using a disabled account
• C.An attempt was made to log on with the user account outside of the allowed time
• D.A user successfully logged on to a computer

Under no circumstances should anyone, with the exception of qualified computer forensics personnel, make any attempts to restore or recover information from a computer system or device that holds electronic information.

• A.False
• B.True

Smith, an employee of a reputed forensic Investigation firm, has been hired by a private organization to investigate a laptop that is suspected to be involved in hacking of organization DC server. Smith wants to find all the values typed into the Run box in the Start menu. Which of the following registry key Smith will check to find the above information?

• A.MountedDevices key
• B.TypedURLs key
• C.UserAssist Key
• D.RunMRU key

Subscriber Identity Module (SIM) is a removable component that contains essential information about the subscriber. Its main function entails authenticating the user of the cell phone to the network to gain access to subscribed services. SIM contains a 20-digit long Integrated Circuit Card identification (ICCID) number, identify the issuer identifier Number from the ICCID below.

• A.245252
• B.89
• C.44
• D.001451548