Question 1

What is the term used to refer to files that have been manipulated in order to conceal the contents of the original file?

Accepted Answer

A)  cleaned files 
B)  wiped files 
C)  deleted files 
D)  hidden files 
A)  cleaned files 
B)  wiped files 
C)  deleted files 
D)  hidden files D

Question 2

What US government agency operates the Computer Forensic Tool Testing Project?

Accepted Answer

A)  National Institute of Standards and Technology (NIST) 
B)  National Security Agency (NS
A)  
C)  Internet Crime Complaint Center (IC3) 
D)  Action Fraud 
A)  National Institute of Standards and Technology (NIST) 
B)  National Security Agency (NS
A)  
C)  Internet Crime Complaint Center (IC3) 
D)  Action Fraud A

Question 3

What is the name for the device that allows read-only access to all accessible data on a drive and keeps anything from being written to an original drive?

Accepted Answer

A)  wiping tool 
B)  write-blocker 
C)  EnCase 
D)  Cell-brite 
A)  wiping tool 
B)  write-blocker 
C)  EnCase 
D)  Cell-brite B

Question 4

Which of the following is not a specific criteria identified for imaging tools by NIST?

Accepted Answer

A)  the tool shall log I/O errors 
B)  tools shall not alter the original disk 
C)  tools shall be affordable 
D)  tools shall make a duplicate or image of an original disk 
A)  the tool shall log I/O errors 
B)  tools shall not alter the original disk 
C)  tools shall be affordable 
D)  tools shall make a duplicate or image of an original disk

Question 5

When an examiner validates that the hard drive image they are working with is an authentic duplicate of the original, they use a unique algorithm to generate a:

Accepted Answer

A)  copy 
B)  digi-bit 
C)  hash value 
D)  partitioned file 
A)  copy 
B)  digi-bit 
C)  hash value 
D)  partitioned file

Question 6

What is the term used to refer to the organization of a hard drive into separate storage spaces?

Accepted Answer

A)  extracting 
B)  partitioning 
C)  wiping 
D)  carving 
A)  extracting 
B)  partitioning 
C)  wiping 
D)  carving

Question 7

What is the term used to refer to the copy and capture of original data files in a way that makes them available for analyses that minimizes the likelihood of error?

Accepted Answer

A)  preservation 
B)  instant process 
C)  carving 
D)  wiping 
A)  preservation 
B)  instant process 
C)  carving 
D)  wiping

Question 8

What phrase references the process of searching for files and extracting that data without considering the larger file systems?

Accepted Answer

A)  file signature 
B)  wiping 
C)  partitioning 
D)  file carving 
A)  file signature 
B)  wiping 
C)  partitioning 
D)  file carving

What is the term used to refer to files that have been manipulated in order to conceal the contents of the original file?

What US government agency operates the Computer Forensic Tool Testing Project?

What is the name for the device that allows read-only access to all accessible data on a drive and keeps anything from being written to an original drive?

Which of the following is not a specific criteria identified for imaging tools by NIST?

When an examiner validates that the hard drive image they are working with is an authentic duplicate of the original, they use a unique algorithm to generate a:

What is the term used to refer to the organization of a hard drive into separate storage spaces?

What is the term used to refer to the copy and capture of original data files in a way that makes them available for analyses that minimizes the likelihood of error?

What phrase references the process of searching for files and extracting that data without considering the larger file systems?

Law Enforcement, Privacy, and Security in Dealing With Cybercrime; Technology and Cybercrime

Computer Hackers and Hacking

Malware and Automated Computer Attacks

Digital Piracy and Intellectual Property Theft

Economic Crimes and Online Fraud

Child Pornography and Sexual Exploitation; Pornography, Prostitution, and Sex Crimes

Online Extremism, Cyberterror, and Cyberwarfare

Cybercrime and Criminological Theories

Evolution of Digital Forensics

Legal Challenges in Digital Forensic Investigations

The Future of Cybercrime, Terror, and Policy

Filters

Exam 10: Acquisition and Examination of Forensic Evidence

What is the term used to refer to files that have been manipulated in order to conceal the contents of the original file?

What US government agency operates the Computer Forensic Tool Testing Project?

What is the name for the device that allows read-only access to all accessible data on a drive and keeps anything from being written to an original drive?

Which of the following is not a specific criteria identified for imaging tools by NIST?

When an examiner validates that the hard drive image they are working with is an authentic duplicate of the original, they use a unique algorithm to generate a:

What is the term used to refer to the organization of a hard drive into separate storage spaces?

What is the term used to refer to the copy and capture of original data files in a way that makes them available for analyses that minimizes the likelihood of error?

What phrase references the process of searching for files and extracting that data without considering the larger file systems?

Law Enforcement, Privacy, and Security in Dealing With Cybercrime; Technology and Cybercrime

Computer Hackers and Hacking

Malware and Automated Computer Attacks

Digital Piracy and Intellectual Property Theft

Economic Crimes and Online Fraud

Child Pornography and Sexual Exploitation; Pornography, Prostitution, and Sex Crimes

Online Extremism, Cyberterror, and Cyberwarfare

Cybercrime and Criminological Theories

Evolution of Digital Forensics

Legal Challenges in Digital Forensic Investigations

The Future of Cybercrime, Terror, and Policy

Filters