Question 1
According to NIST SP 800-61, what are the four phases of the incident response lifecycle?
Correct Answer:
Preparation, Detection & Analysis, Containment/Eradication/Recovery, Post-Incident Activity
Question 2
During malware analysis, what is the difference between static and dynamic analysis?
Correct Answer:
Static analysis examines the malware without executing it; dynamic analysis runs the malware in a controlled environment
Question 3
What is a 'sandbox' in the context of malware analysis?
Correct Answer:
An isolated virtual environment used to execute and observe malware behavior safely
Question 4
In incident response, what does the term 'containment' refer to?
Correct Answer:
Limiting the spread and impact of an incident while preserving forensic evidence
Question 5
What tool would a CCE examiner use to examine strings embedded in a malware binary without executing it?
Correct Answer:
The 'strings' utility or BinText
Question 1
Exam overview

About this Exam

Prepare with the Certified Computer Examiner (CCE) practice quiz. This question bank includes 100 questions covering examiner, computer, forensics, forensic, and file. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

Certified Computer Examiner (CCE)

This practice set contains 100 questions from the matching question bank and focuses on examiner, computer, forensics, forensic, and file. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions