Question 1

Using Linux to wipe the target drive,the command-line command would be ___ .

Accepted Answer

A) cc 
B) dd 
C) nd 
D) md5sum 
A) cc 
B) dd 
C) nd 
D) md5sum B

Question 2

The chain of custody accounts for the handling of evidence and documents that handling.

Accepted Answer

A) True 
 B)False  True

Question 3

The Windows Registry contains a list of USB devices that have been connected to the machine.

Accepted Answer

A) True 
 B)False  True

Question 4

The Linux log file that can reveal attempts to compromise the system or the presence of a virus or spyware is ______________.

Accepted Answer

A) /var/log/kern.log 
B) /var/log/apache2/* 
C) /var/log/lighttpd/* 
D) /var/log/apport.log 
A) /var/log/kern.log 
B) /var/log/apache2/* 
C) /var/log/lighttpd/* 
D) /var/log/apport.log

Question 5

_______ is a free tool that can be used to recover Windows files.

Accepted Answer

A) SearchIt 
B) Disk Digger 
C) FileRecover 
D) None of the above 
A) SearchIt 
B) Disk Digger 
C) FileRecover 
D) None of the above

Question 6

netstat is a command you can use with a forensic copy of a machine to compare two files.

Accepted Answer

A) True 
 B)False

Question 7

The Linux log file that contains activity related to the web server is ______.

Accepted Answer

A) /var/log/kern.log 
B) /var/log/apache2/* 
C) /var/log/lighttpd/* 
D) /var/log/apport.log 
A) /var/log/kern.log 
B) /var/log/apache2/* 
C) /var/log/lighttpd/* 
D) /var/log/apport.log

Question 8

If you fail to handle evidence properly ___________.

Accepted Answer

A) You may damage the hard drive. 
B) It may be unusable in court. 
C) Law enforcement may not look at it. 
D) None of the above. 
A) You may damage the hard drive. 
B) It may be unusable in court. 
C) Law enforcement may not look at it. 
D) None of the above.

Question 9

The Windows command to list any shared files that are currently open is ___________.

Accepted Answer

A) openfiles 
B) fc 
C) netstat 
D) None of the above 
A) openfiles 
B) fc 
C) netstat 
D) None of the above

Question 10

Documentation of every person who had access to evidence,how they interacted with it,and where it was stored is called the ________________.

Accepted Answer

A) Forensic trail 
B) Chain of custody 
C) Audit trail 
D) None of the above 
A) Forensic trail 
B) Chain of custody 
C) Audit trail 
D) None of the above

Question 11

Frequently the first responder to a computer crime is the network administrator.

Accepted Answer

A) True 
 B)False

Question 12

Using Linux to backup your hard drive,if you want to create a hash,you would use the command-line command ___________.

Accepted Answer

A) cc 
B) dd 
C) nd 
D) md5sum 
A) cc 
B) dd 
C) nd 
D) md5sum

Question 13

_________ can include logs,portable storage,emails,tablets,and cell phones.

Accepted Answer

A) Computer evidence 
B) Ancillary hardware 
C) Network devices 
D) None of the above 
A) Computer evidence 
B) Ancillary hardware 
C) Network devices 
D) None of the above

Question 14

In Linux the command to set up a target forensics server to receive a copy of a drive is dd.

Accepted Answer

A) True 
 B)False

Question 15

Most Windows logs are turned on automatically.

Accepted Answer

A) True 
 B)False

Question 16

You may use Linux to make a ______________ of the hard drive.

Accepted Answer

A) Bootable copy 
B) Screen shot 
C) New version 
D) Forensically valid copy 
A) Bootable copy 
B) Screen shot 
C) New version 
D) Forensically valid copy

Question 17

The Windows Registry lists USB devices that have been connected to the machine.

Accepted Answer

A) True 
 B)False

Question 18

The Windows command fc lists all active sessions to the computer.

Accepted Answer

A) True 
 B)False

Question 19

Windows logging can be turned on and off with a tool called auditpol.exe.

Accepted Answer

A) True 
 B)False

Question 20

In Windows the log that contains events collected from remote computers is the ____________ log.

Accepted Answer

A) Application 
B) System 
C) Forwardedevents 
D) Applications and services 
A) Application 
B) System 
C) Forwardedevents 
D) Applications and services

Using Linux to wipe the target drive,the command-line command would be ___ .

The chain of custody accounts for the handling of evidence and documents that handling.

The Windows Registry contains a list of USB devices that have been connected to the machine.

The Linux log file that can reveal attempts to compromise the system or the presence of a virus or spyware is ______________.

_______ is a free tool that can be used to recover Windows files.

netstat is a command you can use with a forensic copy of a machine to compare two files.

The Linux log file that contains activity related to the web server is ______.

If you fail to handle evidence properly ___________.

The Windows command to list any shared files that are currently open is ___________.

Documentation of every person who had access to evidence,how they interacted with it,and where it was stored is called the ________________.

Frequently the first responder to a computer crime is the network administrator.

Using Linux to backup your hard drive,if you want to create a hash,you would use the command-line command ___________.

_________ can include logs,portable storage,emails,tablets,and cell phones.

In Linux the command to set up a target forensics server to receive a copy of a drive is dd.

Most Windows logs are turned on automatically.

You may use Linux to make a ______________ of the hard drive.

The Windows Registry lists USB devices that have been connected to the machine.

The Windows command fc lists all active sessions to the computer.

Windows logging can be turned on and off with a tool called auditpol.exe.

In Windows the log that contains events collected from remote computers is the ____________ log.

Introduction to Computer Security

Networks and the Internet

Cyber Stalking, Fraud, and Abuse

Denial of Service Attacks

Malware

Techniques Used by Hackers

Industrial Espionage in Cyberspace

Encryption

Computer Security Software

Security Policies

Network Scanning and Vulnerability Scanning

Cyber Terrorism and Information Warfare

Cyber Detective

Filters

Exam 14: Introduction to Forensics

Using Linux to wipe the target drive,the command-line command would be ___ .

The chain of custody accounts for the handling of evidence and documents that handling.

The Windows Registry contains a list of USB devices that have been connected to the machine.

The Linux log file that can reveal attempts to compromise the system or the presence of a virus or spyware is ______________.

_______ is a free tool that can be used to recover Windows files.

netstat is a command you can use with a forensic copy of a machine to compare two files.

The Linux log file that contains activity related to the web server is ______.

If you fail to handle evidence properly ___________.

The Windows command to list any shared files that are currently open is ___________.

Documentation of every person who had access to evidence,how they interacted with it,and where it was stored is called the ________________.

Frequently the first responder to a computer crime is the network administrator.

Using Linux to backup your hard drive,if you want to create a hash,you would use the command-line command ___________.

_________ can include logs,portable storage,emails,tablets,and cell phones.

In Linux the command to set up a target forensics server to receive a copy of a drive is dd.

Most Windows logs are turned on automatically.

You may use Linux to make a ______________ of the hard drive.

The Windows Registry lists USB devices that have been connected to the machine.

The Windows command fc lists all active sessions to the computer.

Windows logging can be turned on and off with a tool called auditpol.exe.

In Windows the log that contains events collected from remote computers is the ____________ log.

Introduction to Computer Security

Networks and the Internet

Cyber Stalking, Fraud, and Abuse

Denial of Service Attacks

Malware

Techniques Used by Hackers

Industrial Espionage in Cyberspace

Encryption

Computer Security Software

Security Policies

Network Scanning and Vulnerability Scanning

Cyber Terrorism and Information Warfare

Cyber Detective

Filters