University:
Eastern Kentucky University
Course:
CSC 189 | Computing Concepts and Programming
Academic year:

2023
Views:

114

Pages:

2
Author:

Alma Hester

Guide to Computer Forensics and Investigations Ch. 10 Solutions-1 Chapter 10 Solutions Review Questions 1. Virtual Machine Extensions (VMX) are part of which of the following? c. Intel Virtualized Technology 2. You can expect to find a type 2 hypervisor on what type of device? (Choose all that apply.) a. Desktop b. Smartphone c. Tablet 3. Which of the following file extensions are associated with VMware virtual machines? a. .vmx, .log, and .nvram 4. In VirtualBox, a(n) ____________________ file contains settings for virtual hard drives. c. .vbox 5. 6. The number of VMs that can be supported per host by a type 1 hypervisor is generally determined by the amount of __________ and ______________. RAM, storage A forensic image of a VM includes all snapshots. True or False? False 7. Which Registry key contains associations for file extensions? b. HKEY_CLASSES_ROOT 8. Which of the following is a clue that a virtual machine has been installed on a host system? b. Virtual network adapter 9. To find network adapters, you use the ________ command in Windows and the _______________ command in Linux. ipconfig, ifconfig 10. What are the three modes of protection in the DiD strategy? People, technology, operations 11. A layered network defense strategy puts the most valuable data where? c. In the innermost layer 12. Tcpslice can be used to retrieve specific timeframes of packet captures. True or False? True 13. Packet analyzers examine what layers of the OSI model? c. Layers 2 and 3 Guide to Computer Forensics and Investigations Ch. 10 Solutions-2 14. When do zero day attacks occur? (Choose all that apply.) b. Before a patch is available c. Before the vendor is aware of the vulnerability