Exam Name: | Computer Hacking Forensic Investigator (v9) | ||
Exam Code: | 312-49v9 Dumps | ||
Vendor: | ECCouncil | Certification: | CHFIv9 |
Questions: | 589 Q&A's | Shared By: | karter |
Netstat is a tool for collecting information regarding network connections. It provides a simple view of TCP and UDP connections, and their state and network traffic statistics. Which of the following commands shows you the TCP and UDP network connections, listening ports, and the identifiers?
A forensics investigator needs to copy data from a computer to some type of removable media so he can examine the information at another location. The problem is that the data is around 42GB in size. What type of removable media could the investigator use?
Ivanovich, a forensics investigator, is trying to extract complete information about running processes from a system. Where should he look apart from the RAM and virtual memory?