A company has contracted with a network security firm to help identify the vulnerabilities of the corporate network. The firm sends a team to perform penetration tests to the company network. Why would the team use forensic tools?
- to obtain specially designed operating systems preloaded with tools optimized for hacking
- to detect any evidence of a hack or malware in a computer or network
- to detect installed tools within files and directories that provide threat actors remote access and control over a computer or network
- to reverse engineer binary files when writing exploits and when analyzing malware
Explanation: Forensic tools are used by security professionals to sniff out any trace of evidence existing in a computer. During a penetration test, these tools allow a team to identify residues of previous hacks or the presence of malware that may otherwise remain hidden within the system. Examples of such tools include Sleuth Kit, Helix, Maltego, and Encase.
Related exam: CCNA 3 Final Exam Answers
