Linux and Mac Forensics
3 practice questions under this official exam objective (312-49v10), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
3 total · page 1 of 1Remote Linux RAM Acquisition with LiME and Netcat?
Remote Linux RAM acquisition is performed by loading LiME on the suspect host with a TCP export path and receiving the stream with Netcat on the foren
Macintosh Boot Process Fallback when Pre-linked Kernel Missing
This question examines the Mac OS X boot sequence failure mode when the pre-linked kernel cache is absent. The correct answer identifies the mkext cac
dcfldd /dev/zero Disk Wiping Command
The dcfldd command with if=/dev/zero writes a stream of zeros to the target device, effectively filling the disk with zeros for forensic wiping or pre