II0-001 Exam Questions and Answers | Exam-Dumps (Page: 5)

QUESTION: 21

Tracebacks are difficult to perform in a Distributed Denial of Service attack because:

by definition of the attack, the locality of the attacking slaves is dispersed
in order to determine accountability, not only the slaves, but the masters, and finally the originating machine must be discovered
the attack involves a multitude of attackers that do not necessarily share any attributes in common
all of the above

Answer(s): D

QUESTION: 22

A Distributed Denial of Service attack has just occurred using reflectors. What are the implications in terms of tracing the attack back?

a successful Traceback to the slave is not possible as by definition, a reflector DDoS attack spoofs the connection between the slave and reflector
a successful Traceback is possible as some form of reflector attacks require legitimate (non-spoofed) connections from the slave to the reflector, which would expose the slave to potentially immediate Traceback
a successful Traceback to the reflector is possible and an examination of the reflector machine's logs will point to the attack master
reflector machines replace slaves in the attack, further complicating any Traceback effort

Answer(s): B

Reveal Solution Next Question

What IP Traceback technique's basic idea is to have routers label a subset of transit packets with information about the router labeling router, thus enabling the receiver to reconstruct the path back to the source?

SPIE
ITRACE
PPM
Ingress Filtering

Answer(s): C

Reveal Solution Next Question

QUESTION: 24

Which is true regarding tracing Secure Socket Layer (SSL) and Transport Layer Security (TLS) connections?

TLS is more difficult to trace due to the encryption of the message source routing
The connection source and destination can be traced in both cases because the message header is unencrypted.
The connection recipient can be traced in both cases, but the source cannot.
An SSL connection can be traced, even with encrypted content, where the TLS connection can not be traced due to header encryption.

Answer(s): B

Reveal Solution Next Question

QUESTION: 25

Web anonymizers:

Are intended to allow for a Web surfer to connect to a Web server without revealing their identity (IP address).
Can be traced from the Web surfer's proxy or ISP if the anonymizer appends the URL of the distant server to its own URL.
Allow a Web surfer to bypass Web blocking software being used by their own Web proxy or ISP.
All of the above.

Answer(s): D

Reveal Solution Next Question

IISFA II0-001 Exam (page: 5)
IISFA II0-001 Certified Information Forensics Investigator (CIFI)
Updated on: 15-Feb-2026

QUESTION: 21

QUESTION: 22

QUESTION: 23

QUESTION: 24

QUESTION: 25

IISFA II0-001 Exam (page: 5) IISFA II0-001 Certified Information Forensics Investigator (CIFI) Updated on: 15-Feb-2026

QUESTION: 21

QUESTION: 22

QUESTION: 23

QUESTION: 24

QUESTION: 25

IISFA II0-001 Exam (page: 5)
IISFA II0-001 Certified Information Forensics Investigator (CIFI)
Updated on: 15-Feb-2026