Jump to content
  • 0

Question

Posted

I'm studying for the Security+ exam and in my study material noticed that one of the questions and answers I have says:


In which of the following locations would a forensic analyst look to find a hooked process?
A. BIOS
B. Slack space
C. RAM
D. Rootkit

Answer: A

Yet when I tried to look information about a hooked process I came up with the follow--see link below--so which is right?


http://wiki.answers.com/Q/Were_would_a_forensic_analyst_look_for_a_hooked_process

Share this post


Link to post
Share on other sites

5 answers to this question

  • 0

Posted

RAM. none of the other choices even potentially make sense.
1 person likes this

Share this post


Link to post
Share on other sites
  • 0

Posted

[quote name='netsurfer802' timestamp='1356480338' post='595415448']In which of the following locations would a forensic analyst look to find a hooked process?
A. BIOS
B. Slack space
C. RAM
D. Rootkit

Answer: A[/quote]
Wait, is that answer from the book, or is that your assumption?

RAM is definitely the answer. If the book is telling you differently, you might want to contact your professor (if you have one) to get him to let others know that there is an error.

Share this post


Link to post
Share on other sites
  • 0

Posted

Yeah I dont even know why they put "Slack Space" in there. You could have rootkit because the Rootkit might be the one doing the hooking perhaps.

Share this post


Link to post
Share on other sites
  • 0

Posted

[quote name='ChuckFinley' timestamp='1356527502' post='595415998']
Yeah I dont even know why they put "Slack Space" in there. You could have rootkit because the Rootkit might be the one doing the hooking perhaps.
[/quote]
a rootkit is a thing, not a location

Share this post


Link to post
Share on other sites
  • 0

Posted

Ram is the only answer that makes any kind of sense!
1 person likes this

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0

  • Recently Browsing   0 members

    No registered users viewing this page.