nerdexam
Mile2_Security

ML0-320 · Question #238

You have been asked to assist an investigation team in collecting data and evidence related to an internal hacking case. The investigator in charge of the case would like to capture all keystrokes…

The correct answer is C. Install a hardware based key logger. See the full explanation below for the reasoning.

Question

You have been asked to assist an investigation team in collecting data and evidence related to an internal hacking case. The investigator in charge of the case would like to capture all keystrokes from the suspect but is afraid the employee under investigation who possesses great technical skills might have installed integrity tools on his system that would detect any new software installed. What solution would be best to use to reach the investigator requirement?

Options

  • ADisable the integrity tools in place
  • BInstall a software key logger that does not show in the process list
  • CInstall a hardware based key logger
  • DSniff all traffic and keystrokes from the network

How the community answered

(28 responses)
  • A
    7% (2)
  • B
    14% (4)
  • C
    75% (21)
  • D
    4% (1)

Community Discussion

No community discussion yet for this question.

Full ML0-320 Practice