Exam 10: Computer Forensics: Terminology and Requirements

Evaluation of the ________ and unused space on the physical drive may identify the file systems present and determine if the entire physical size of the hard disk is accounted for.

(Short Answer)

4.8/5

(40)

Question 41

Extraction of a file pertinent to an examination may be based on the file name and extension, file header, file content, and location on the drive.

(True/False)

4.8/5

(38)

Question 42

The cluster size for a particular device is specified in which of the following?

(Multiple Choice)

4.9/5

(34)

Question 43

A file system is the disk management platform employed by a particular operating system.

(True/False)

4.9/5

(33)

Question 44

Which of the following is a single circular disk with concentric tracks that are turned by spindles under one or more heads?

(Multiple Choice)

4.8/5

(39)

Question 45

Microsoft's ________ provides more security and is more efficient in terms of utilization of storage space than FAT.

(Short Answer)

4.8/5

(32)

Question 46

A file system is the combination of a hardware device and computer instructions and data that reside as read-only software on that device.

(True/False)

4.9/5

(27)

Question 47

ASCII code for defining characters is based on ________ code.

(Multiple Choice)

4.8/5

(35)

Question 48

Explain how over-reliance on automated programs and self-proclaimed experts pose a problem in computer investigations.How can this problem be overcome?

(Essay)

4.9/5

(41)

Question 49

What is the first step in the development of computer forensic capabilities? Describe the minimum hardware requirements for a dream field system.

(Short Answer)

4.7/5

(45)

Question 50

The ________ determines the size of the appropriate FAT based on the number of clusters necessary to represent the entire disk space.

(Short Answer)

4.9/5

(33)

Question 51

Which of the following tools are the most popular and stand-alone imaging utilities employed for forensic investigators?

(Multiple Choice)

4.8/5

(29)

Question 52

Which lab system is capable of handling larger workloads simultaneously?

(Multiple Choice)

4.8/5

(38)

Question 53

Raw image files increase the costs associated with the maintenance of forensic laboratories and software libraries because they exhibit backward compatibility issues.

(True/False)

4.8/5

(41)

Question 54

Discuss the development within mobile device forensic tools and suggest issues that need to be addressed to improve them.

(Essay)

4.8/5

(43)

Question 55

________ can be used to identify and eliminate known files through the comparison of calculated hash values to authenticated hash values.

(Short Answer)

4.8/5

(45)

Question 56

Computer forensics helps ________ in pre-search warrant preparations and post-seizure handling of computer equipment.

(Short Answer)

4.9/5

(41)

Question 57

Which of the following is NOT a traditional problem in computer investigations?

(Multiple Choice)

4.9/5

(42)

Question 58

The logical file size refers to the exact size of a file in bytes.

(True/False)

4.9/5

(42)

Question 59

File systems allow end-users to perceive their document as multiple streams of bytes while providing for its storage in contiguous sectors.

(True/False)

4.8/5

(36)

Question 60

Showing 41 - 60 of 62

Evaluation of the ________ and unused space on the physical drive may identify the file systems present and determine if the entire physical size of the hard disk is accounted for.

Extraction of a file pertinent to an examination may be based on the file name and extension, file header, file content, and location on the drive.

The cluster size for a particular device is specified in which of the following?

A file system is the disk management platform employed by a particular operating system.

Which of the following is a single circular disk with concentric tracks that are turned by spindles under one or more heads?

Microsoft's ________ provides more security and is more efficient in terms of utilization of storage space than FAT.

A file system is the combination of a hardware device and computer instructions and data that reside as read-only software on that device.

ASCII code for defining characters is based on ________ code.

Explain how over-reliance on automated programs and self-proclaimed experts pose a problem in computer investigations.How can this problem be overcome?

What is the first step in the development of computer forensic capabilities? Describe the minimum hardware requirements for a dream field system.

The ________ determines the size of the appropriate FAT based on the number of clusters necessary to represent the entire disk space.

Which of the following tools are the most popular and stand-alone imaging utilities employed for forensic investigators?

Which lab system is capable of handling larger workloads simultaneously?

Raw image files increase the costs associated with the maintenance of forensic laboratories and software libraries because they exhibit backward compatibility issues.

Discuss the development within mobile device forensic tools and suggest issues that need to be addressed to improve them.

________ can be used to identify and eliminate known files through the comparison of calculated hash values to authenticated hash values.

Computer forensics helps ________ in pre-search warrant preparations and post-seizure handling of computer equipment.

Which of the following is NOT a traditional problem in computer investigations?

The logical file size refers to the exact size of a file in bytes.

File systems allow end-users to perceive their document as multiple streams of bytes while providing for its storage in contiguous sectors.

Introduction and Overview of Computer Forensics and Cybercrime

Computer Terminology and History

Traditional Computer Crime: Early Hackers and Theft of Components

Contemporary Computer Crime

Identity Theft and Identity Fraud

Terrorism and Organized Crime

Avenues for Prosecution and Government Efforts

Applying the First Amendment to Computer-Related Crime

The Fourth Amendment and Other Legal Issues

Searching and Seizing Computer-Related Evidence

Processing of Evidence and Report Preparation

Conclusions and Future Issues

Filters