Exam 13: Business Continuity

A ____ is a service contract between a vendor and a client that specifies what services will be provided, the responsibilities of each party, and any guarantees of service.

Windows stores files on a hard drive in 512-byte blocks called ____________________.

In a(n) ____ cluster, every server in the cluster performs useful work.

A ____ is a metallic enclosure that prevents the entry or escape of an electromagnetic field.

According to the Federal Bureau of Investigation (FBI), almost ____ percent of crimes committed today leave behind digital evidence that can be retrieved through computer forensics.

Describe what happens when the response team arrives and secures the crime scene.

____ is a form of eavesdropping in which special equipment is used to pick up telecommunication signals or data within a computer device by monitoring the electromagnetic fields.

What are the steps in damage control?

A ____ typically begins by identifying threats through a risk assessment.

The ____ response team serves as first responders whenever digital evidence needs to be preserved.

RAM slack can contain any information that has been created, viewed, modified, downloaded, or copied since the computer was last booted.

____ is designed to ensure that an organization can continue to function in the event of a natural or man-made disaster.

What is required upon completion of an evidence examination?

Explain how to best capture volatile data.

System availability is often expressed as a percentage of uptime in a year.

Multiple sectors are used to make up a ____.

RAID 0 technology is based on ____________________.

What does Windows do if a file being saved is not long enough to fill up the last sector on the disk?

Generally, ____________________ focuses on restoring computing and technology resources to their former state.

Describe the Windows page file and discuss why it can be important for evidence recovery.