Question 1

Match the following forensic tools with their attributes.
-dtSearch

Accepted Answer

A)   The universal hexadecimal editor
B)   Invaluable for combing through large amounts of data
C)   Exclusively for Macs
D)   AccessData tool designed for finding and examining evidence
E)   Primarily for computer crime investigatorsF) A) and C)
G) A) and B)

Question 2

The first step in analyzing data is to _________ it.

Accepted Answer

The answer of The first step in analyzing data is...

Question 3

A forensics lab should have all of the following applications on hand EXCEPT

Accepted Answer

A)  Microsoft Office versions
B)  ClarisWorks
C)  Peachtree Accounting
D)  Visual BasicE) A) and B)
F) C) and D)

Question 4

Under no circumstances should you attempt to create a forensically clean drive by simply ________ the drive.

Accepted Answer

The answer of Under no circumstances should you attempt to...

Question 5

You may need to do a(n)________ analysis during a hacker attack or other intrusion.

Accepted Answer

The answer of You may need to do a(n)________ analysis...

Question 6

Match the following types of files to their description.
-Write blocker

Accepted Answer

A)   Unique digital signature of data
B)   Additional sectors created to fill a cluster
C)   Application that prevents changes to a hard drive
D)   Captures a "snapshot" of everything on the drive
E)   Mathematical computations that validate a copyF) None of the above
G) B) and D)

Question 7

Preserving e-evidence and good ________ of steps taken during the investigation are essential for success in computer crime cases.

Accepted Answer

The answer of Preserving e-evidence and good ________ of steps...

Question 8

Match the following forensic tools with their attributes.
-Sleuth Kit

Accepted Answer

A)   Investigates the contents of BlackBerry devices
B)   Graphical user interface consists of a series of panes
C)   Safely and easily images Mac drives
D)   Reads the first 32 bits of a file to identify its type
E)   Open-source program that runs on UNIX plattormsF) None of the above
G) C) and E)

Question 9

A defensible approach is an objective and unbiased approach that

Accepted Answer

A)  Is performed in accordance with forensic science principles
B)  Is conducted with verified tools
C)  Is documented thoroughly
D)  All the aboveE) None of the above
F) A) and B)

Question 10

A(n)________ can cause MD5 hashes to be different if different tools are used to acquire a disk image.

Accepted Answer

The answer of A(n)________ can cause MD5 hashes to be...

Question 11

________ is another name for the security key you need to access a system when using EnCase.

Accepted Answer

The answer of ________ is another name for the security...

Question 12

Data may be hidden by all of the following methods EXCEPT

Accepted Answer

A)  Using special characters in the actual name
B)  Renaming to a common name used by the operating system
C)  Encrypting the file
D)  Password-protecting the fileE) A) and D)
F) All of the above

Question 13

If volatile data must be acquired,you may need to do your analysis in a(n)

Accepted Answer

A)  Trusted environment
B)  Postmortem environment
C)  Untrusted environment
D)  Dead environmentE) A) and C)
F) All of the above

Question 14

Match the following forensic tools with their attributes.
-UTK

Accepted Answer

A)   The universal hexadecimal editor
B)   Invaluable for combing through large amounts of data
C)   Exclusively for Macs
D)   AccessData tool designed for finding and examining evidence
E)   Primarily for computer crime investigatorsF) C) and D)
G) A) and E)

Question 15

Which factor(s) determine the type of tools needed for an analysis?

Accepted Answer

A)  The environment
B)  The power sources available where the analysis will be done
C)  The make of the equipment to be analyzed
D)  None of the aboveE) None of the above
F) All of the above

Question 16

________ data can include spreadsheets,databases,and word processing files.

Accepted Answer

The answer of ________ data can include spreadsheets,databases,and word processing...

Question 17

A forensics lab is typically considered to be a(n)________ environment.

Accepted Answer

The answer of A forensics lab is typically considered to...

Question 18

Match the following forensic tools with their attributes.
-FTK

Accepted Answer

A)   The universal hexadecimal editor
B)   Invaluable for combing through large amounts of data
C)   Exclusively for Macs
D)   AccessData tool designed for finding and examining evidence
E)   Primarily for computer crime investigatorsF) C) and D)
G) A) and C)

Question 19

Match between columns
                        Premises: Scanner
Spoofer
Presumption of evidence
Document the activities
Password cracker
Anonymous remailer
Nuker
Preponderance of evidence
Proof beyond reasonable doubt
Presumption

Accepted Answer

The Answer of Used to break encrypted password files and is...

Question 20

Which of the following does NOT affect the choice of forensic tool(s) for a case?

Accepted Answer

A)  The operating system
B)  State of the data
C)  Availability of an expert witness
D)  Domestic and international lawsE) None of the above
F) A) and B)

Exam 3: Tools, Environments, Equipment, and Certifications

Data may be hidden by all of the following methods EXCEPT

Correct Answer
verified

If volatile data must be acquired,you may need to do your analysis in a(n)

Correct Answer
verified

________ data can include spreadsheets,databases,and word processing files.

Correct Answer
verified

Match the following types of files to their description. -Write blocker

Correct Answer
verified

Match the following investigative objectives to their proper chain of custody practices.

Preserving e-evidence and good ________ of steps taken during the investigation are essential for success in computer crime cases.

Correct Answer
verified

Match the following forensic tools with their attributes. -UTK

Correct Answer
verified

Under no circumstances should you attempt to create a forensically clean drive by simply ________ the drive.

Correct Answer
verified

A defensible approach is an objective and unbiased approach that

Correct Answer
verified

A forensics lab should have all of the following applications on hand EXCEPT

Correct Answer
verified

Which factor(s) determine the type of tools needed for an analysis?

Correct Answer
verified

A(n)________ can cause MD5 hashes to be different if different tools are used to acquire a disk image.

Correct Answer
verified

You may need to do a(n)________ analysis during a hacker attack or other intrusion.

Correct Answer
verified

A forensics lab is typically considered to be a(n)________ environment.

Correct Answer
verified

Which of the following does NOT affect the choice of forensic tool(s) for a case?

Correct Answer
verified

The first step in analyzing data is to _________ it.

Correct Answer
verified

Match the following forensic tools with their attributes. -FTK

Correct Answer
verified

Match the following forensic tools with their attributes. -Sleuth Kit

Correct Answer
verified

Match the following forensic tools with their attributes. -dtSearch

Correct Answer
verified

________ is another name for the security key you need to access a system when using EnCase.

Correct Answer
verified

Exam 3: Tools, Environments, Equipment, and Certifications

Data may be hidden by all of the following methods EXCEPT

Correct AnswerverifiedShow Answer

If volatile data must be acquired,you may need to do your analysis in a(n)

Correct AnswerverifiedShow Answer

________ data can include spreadsheets,databases,and word processing files.

Correct AnswerverifiedShow Answer

Match the following types of files to their description. -Write blocker

Correct AnswerverifiedShow Answer

Match the following investigative objectives to their proper chain of custody practices.

Preserving e-evidence and good ________ of steps taken during the investigation are essential for success in computer crime cases.

Correct AnswerverifiedShow Answer

Match the following forensic tools with their attributes. -UTK

Correct AnswerverifiedShow Answer

Under no circumstances should you attempt to create a forensically clean drive by simply ________ the drive.

Correct AnswerverifiedShow Answer

A defensible approach is an objective and unbiased approach that

Correct AnswerverifiedShow Answer

A forensics lab should have all of the following applications on hand EXCEPT

Correct AnswerverifiedShow Answer

Which factor(s) determine the type of tools needed for an analysis?

Correct AnswerverifiedShow Answer

A(n)________ can cause MD5 hashes to be different if different tools are used to acquire a disk image.

Correct AnswerverifiedShow Answer

You may need to do a(n)________ analysis during a hacker attack or other intrusion.

Correct AnswerverifiedShow Answer

A forensics lab is typically considered to be a(n)________ environment.

Correct AnswerverifiedShow Answer

Which of the following does NOT affect the choice of forensic tool(s) for a case?

Correct AnswerverifiedShow Answer

The first step in analyzing data is to _________ it.

Correct AnswerverifiedShow Answer

Match the following forensic tools with their attributes. -FTK

Correct AnswerverifiedShow Answer

Match the following forensic tools with their attributes. -Sleuth Kit

Correct AnswerverifiedShow Answer

Match the following forensic tools with their attributes. -dtSearch

Correct AnswerverifiedShow Answer

________ is another name for the security key you need to access a system when using EnCase.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified