Disagreement ranking

312-49v10 — most debated topics

Community-voted ranking of 71 topics, sorted by disagreement level. A higher dispute score means more test-takers disagree on the answer.

Full ranking

71 topics · highest disagreement first

  1. Which Tor Relay Should Investigators Focus On to Trace Data Origin?

    S-grade Dispute: 50% 5 comments

  2. File Sector Allocation and Fragmentation in Forensics

    S-grade Dispute: 50% 5 comments

  3. Known-stego Attack in Steganalysis

    A-grade Dispute: 50% 4 comments

  4. ResourcesExtract Malware Static Analysis Purpose

    A-grade Dispute: 50% 4 comments

  5. Analyzing Password-Protected Packed Executables

    A-grade Dispute: 50% 3 comments

  6. Analyzing Password-Protected Packed Malware

    S-grade Dispute: 50% 3 comments

  7. Steganalysis for Steganography Attack Detection

    S-grade Dispute: 50% 4 comments

  8. Which Acquisition Type Fits a Cloud-Based Incident Investigation?

    A-grade Dispute: 50% 3 comments

  9. Recovering Microsoft Edge Browser History with NirSoft Tools

    S-grade Dispute: 40% 5 comments

  10. Which Windows Artifact Best Reveals Deleted Folders and Mounted Drives?

    S-grade Dispute: 33% 6 comments

  11. OSI Layer for Network Traffic Monitoring

    A-grade Dispute: 33% 4 comments

  12. Which Tool Extracts Passwords and Hashes from SAM and SYSTEM Files?

    A-grade Dispute: 33% 4 comments

  13. AWS Shared Responsibility Model for Container Services

    A-grade Dispute: 33% 3 comments

  14. What Is the First Forensic Step for an Android Smartwatch?

    A-grade Dispute: 33% 3 comments

  15. What Is an "Idle" System in an IP ID Idle Scan?

    S-grade Dispute: 29% 6 comments

  16. Remote Linux RAM Acquisition with LiME and Netcat?

    S-grade Dispute: 25% 5 comments

  17. How Should an Investigator Examine a Password-Protected Packed Executable?

    S-grade Dispute: 25% 6 comments

  18. What Is the First Step When Searching a Cybercrime Scene for Evidence?

    A-grade Dispute: 25% 4 comments

  19. Sparse or Bit-Stream Acquisition for Email Files and Deleted Fragments?

    S-grade Dispute: 20% 5 comments

  20. Nmap TCP Window Scan OS Identification

    S-grade Dispute: 17% 3 comments

  21. Fileless Malware Persistence in Windows

    S-grade Dispute: 14% 5 comments

  22. Why Were 14-Character Passwords Cracked So Quickly?

    S-grade Dispute: 12% 5 comments

  23. Check Point IPS Logs for Bandwidth and Risk Valuation

    S-grade Dispute: 12% 4 comments

  24. ICMP Type 3 Code 13 Meaning

    A-grade Dispute: 0% 4 comments

  25. TCP Source Port Number Size in Bits

    A-grade Dispute: 0% 3 comments

  26. Identifying Ping of Death via Oversized ICMP Packets

    A-grade Dispute: 0% 3 comments

  27. EnCase Evidence Integrity Mechanism

    A-grade Dispute: 0% 4 comments

  28. Windows Registry Hive for Password Storage

    A-grade Dispute: 0% 3 comments

  29. What Type of Cipher Uses a Hole-Punched Plastic Template?

    A-grade Dispute: 0% 3 comments

  30. What Is the Smallest Physical Storage Unit on a Hard Drive?

    A-grade Dispute: 0% 3 comments

  31. Where Does EnCase Search to Recover NTFS Files and Folders?

    A-grade Dispute: 0% 3 comments

  32. dcfldd /dev/zero Disk Wiping Command

    A-grade Dispute: 0% 3 comments

  33. NTLM Authentication Password Storage Location

    A-grade Dispute: 0% 3 comments

  34. Identifying Lost Clusters in File System Forensics

    A-grade Dispute: 0% 3 comments

  35. Dropbox config.db Forensic Analysis

    A-grade Dispute: 0% 3 comments

  36. Cisco Router % SEC-6-IPACCESSLOGP Meaning

    A-grade Dispute: 0% 3 comments

  37. Recycle Bin File Naming: What Does 'x' Represent?

    A-grade Dispute: 0% 3 comments

  38. Google Drive Desktop Forensics: Identifying Sync Configuration Files

    A-grade Dispute: 0% 4 comments

  39. CHKDSK Primary Function in Windows Forensics

    A-grade Dispute: 0% 4 comments

  40. What is NOT Part of the Pre-Investigation Phase?

    A-grade Dispute: 0% 3 comments

  41. Extracting Google Drive Artifacts with RegScanner

    A-grade Dispute: 0% 3 comments

  42. Identifying Packers Used on Acquired Malware

    A-grade Dispute: 0% 3 comments

  43. Which Windows tool displays local and remote logged-on users?

    A-grade Dispute: 0% 3 comments

  44. Which MySQL Utility Recovers a MyISAM Log File?

    A-grade Dispute: 0% 3 comments

  45. Which Item Is NOT Considered Physical Evidence?

    A-grade Dispute: 0% 3 comments

  46. Which Item Is Not Part of an NTFS EFS DDF?

    A-grade Dispute: 0% 3 comments

  47. Which Perl Script Accesses a Process Executable Image?

    A-grade Dispute: 0% 4 comments

  48. Which RAID Gives Different Volume and Disk Images

    A-grade Dispute: 0% 3 comments

  49. Where MSSQL Database Logs Are Stored

    A-grade Dispute: 0% 3 comments

  50. Which File System Stores MAC Timestamps in UTC?

    A-grade Dispute: 0% 3 comments

  51. Which Tool Restores Files from a Damaged MBR?

    A-grade Dispute: 0% 3 comments

  52. Which Python Script Analyzes Suspicious MS Office Documents?

    A-grade Dispute: 0% 3 comments

  53. Which IoT Layer Holds Sensors and RFID Tags?

    A-grade Dispute: 0% 5 comments

  54. Which Windows Event ID Tracks Registry Value Changes?

    A-grade Dispute: 0% 3 comments

  55. Federal Rule of Evidence 1002 and Original Evidence

    A-grade Dispute: 0% 3 comments

  56. Android Zygote Process for Dalvik VM Startup

    A-grade Dispute: 0% 4 comments

  57. Copying a VM OS Disk Snapshot Across Azure Regions

    A-grade Dispute: 0% 5 comments

  58. Which Volatility Plugin Identifies Hidden Processes and Injected DLLs?

    A-grade Dispute: 0% 4 comments

  59. What Is a Drive-by Download Attack?

    A-grade Dispute: 0% 3 comments

  60. Master Boot Record Missing Component

    A-grade Dispute: 0% 5 comments

  61. R-Studio for Restoring Deleted Partition Data

    A-grade Dispute: 0% 4 comments

  62. Macintosh Boot Process Fallback when Pre-linked Kernel Missing

    A-grade Dispute: 0% 3 comments

  63. Windows Service Start/Stop Event IDs for Forensics

    A-grade Dispute: 0% 3 comments

  64. Isolating a Process for Memory Dump Analysis

    A-grade Dispute: 0% 3 comments

  65. Decrypting Password-Protected Packed Files in Forensics

    A-grade Dispute: 0% 3 comments

  66. SQL Server Data File for Deleted Data Recovery

    A-grade Dispute: 0% 3 comments

  67. Outlook OST vs PST Files for Offline Forensics

    A-grade Dispute: 0% 4 comments

  68. Enhancing ModSecurity WAF Against SQL Injection

    A-grade Dispute: 0% 3 comments

  69. Identifying Tor Bridge Nodes for Censorship Circumvention

    A-grade Dispute: 0% 4 comments

  70. TSK istat Command for Inode Block Analysis

    A-grade Dispute: 0% 3 comments

  71. ASCII Code Interpretation in Cybercrime Investigations

    A-grade Dispute: 0% 3 comments

← Back to 312-49v10 Study Guide