1. When investigating a virus, what is the first step?

A. Check firewall logs.

B. Check IDS logs.

C. Document the virus.

D. Trace the origin of the virus.

2. Which of the following crimes is most likely to leave email evidence?

A. Cyberstalking

B. DoS

C. Logic bomb

D. Fraud

3. Where would you seek evidence that ophcrack had been used on a Windows Server 2008 machine?

A. In the logs of the server; look for the reboot of the system

B. In the logs of the server; look for the loading of a CD

C. In the firewall logs

D. In the IDS logs

4. Logic bombs are often perpetrated by ________.

A. identity thieves

B. disgruntled employees

C. terrorists

D. hackers

5. Spyware is legal.

A. True B. False

6. It is legal for employers to monitor work computers.

A. True B. False

7. What is the primary reason to take cyberstalking seriously?

A. It can damage your system.

B. It can be annoying and distracting.

C. It can be a prelude to real-world violence.

D. It can be part of identity theft

8. What is the starting point for investigating denial of service attacks?

A. Firewall logs

B. Email headers

C. System logs

D. Tracing the packets