Question 1

Hardware manufacturers have designed most computer components to last about ____________________ months between failures.

Accepted Answer

18
eighteen

Question 2

The Windows platforms have long been the primary command-line interface OSs.

Accepted Answer

A) True 
 B)False  False

Question 3

To help determine what computer forensics tool to purchase, a comparison table of functions, subfunctions, and vendor products is useful.

Accepted Answer

A) True 
 B)False  True

Question 4

What are some of the advantages of using command-line forensics tools?

Accepted Answer

One advantage of using command-line tool

Question 5

To make a disk acquisition with En.exe requires only a PC running ____ with a 12-volt power connector and an IDE, a SATA, or a SCSI connector cable.

Accepted Answer

A)  UNIX 
B)  MAC OS X 
C)  Linux 
D)  MS-DOS 
A)  UNIX 
B)  MAC OS X 
C)  Linux 
D)  MS-DOS

Question 6

Illustrate the use of a write-blocker on a Windows environment.

Accepted Answer

In the Windows environment, when a write

Question 7

Explain the advantages and disadvantages of GUI forensics tools.

Accepted Answer

GUI tools have several advantages, such

Question 8

Match each item with a statement below:
-system file where passwords may have been written temporarily

Accepted Answer

A) JFIF 
B) Lightweight workstation 
C) Pagefile.sys 
D) Salvaging 
E) Raw data
F)PDBlock
G)Norton DiskEdit
H)Stationary workstation
I)SafeBack 
A) JFIF 
B) Lightweight workstation 
C) Pagefile.sys 
D) Salvaging 
E) Raw data
F)PDBlock
G)Norton DiskEdit
H)Stationary workstation
I)SafeBack

Question 9

Software forensic tools are grouped into command-line applications and ____________________ applications.

Accepted Answer

GUI
Graphical User I

Question 10

The NIST project that has as a goal to collect all known hash values for commercial software applications and OS files is ____.

Accepted Answer

A)  NSRL 
B)  CFTT 
C)  FS-TST 
D)  PARTAB 
A)  NSRL 
B)  CFTT 
C)  FS-TST 
D)  PARTAB

Question 11

When you research for computer forensics tools, strive for versatile, flexible, and robust tools that provide technical support.

Accepted Answer

A) True 
 B)False

Question 12

Many vendors have developed write-blocking devices that connect to a computer through FireWire,____ 2.0,and SCSI controllers.

Accepted Answer

A)  USB 
B)  IDE 
C)  LCD 
D)  PCMCIA 
A)  USB 
B)  IDE 
C)  LCD 
D)  PCMCIA

Question 13

Match each item with a statement below:
-a tower with several bays and many peripheral devices

Accepted Answer

A) JFIF 
B) Lightweight workstation 
C) Pagefile.sys 
D) Salvaging 
E) Raw data
F)PDBlock
G)Norton DiskEdit
H)Stationary workstation
I)SafeBack 
A) JFIF 
B) Lightweight workstation 
C) Pagefile.sys 
D) Salvaging 
E) Raw data
F)PDBlock
G)Norton DiskEdit
H)Stationary workstation
I)SafeBack

Question 14

Match each item with a statement below:
-usually a laptop computer built into a carrying case with a small selection of peripheral options

Accepted Answer

A) JFIF 
B) Lightweight workstation 
C) Pagefile.sys 
D) Salvaging 
E) Raw data
F)PDBlock
G)Norton DiskEdit
H)Stationary workstation
I)SafeBack 
A) JFIF 
B) Lightweight workstation 
C) Pagefile.sys 
D) Salvaging 
E) Raw data
F)PDBlock
G)Norton DiskEdit
H)Stationary workstation
I)SafeBack

Question 15

____ is a simple drive-imaging station.

Accepted Answer

A)  F.R.E.D. 
B)  SPARC 
C)  FIRE IDE 
D)  DiskSpy 
A)  F.R.E.D. 
B)  SPARC 
C)  FIRE IDE 
D)  DiskSpy

Question 16

Explain the difference between repeatable results and reproducible results.

Accepted Answer

"Repeatable results" means that if you w

Question 17

Match each item with a statement below:
-one of the first MS-DOS tools used for a computer investigation

Accepted Answer

A) JFIF 
B) Lightweight workstation 
C) Pagefile.sys 
D) Salvaging 
E) Raw data
F)PDBlock
G)Norton DiskEdit
H)Stationary workstation
I)SafeBack 
A) JFIF 
B) Lightweight workstation 
C) Pagefile.sys 
D) Salvaging 
E) Raw data
F)PDBlock
G)Norton DiskEdit
H)Stationary workstation
I)SafeBack

Question 18

A forensics workstation consisting of a laptop computer with a built-in LCD monitor and almost as many bays and peripherals as a stationary workstation is also known as a ____.

Accepted Answer

A)  stationary workstation 
B)  field workstation 
C)  lightweight workstation 
D)  portable workstation 
A)  stationary workstation 
B)  field workstation 
C)  lightweight workstation 
D)  portable workstation

Question 19

After retrieving and examining evidence data with one tool, you should verify your results by performing the same tasks with other similar forensics tools.

Accepted Answer

A) True 
 B)False

Question 20

What are the five major function categories of any computer forensics tool?

Accepted Answer

All computer forensic tools, both hardwa

Hardware manufacturers have designed most computer components to last about ____________________ months between failures.

The Windows platforms have long been the primary command-line interface OSs.

To help determine what computer forensics tool to purchase, a comparison table of functions, subfunctions, and vendor products is useful.

What are some of the advantages of using command-line forensics tools?

To make a disk acquisition with En.exe requires only a PC running ____ with a 12-volt power connector and an IDE, a SATA, or a SCSI connector cable.

Illustrate the use of a write-blocker on a Windows environment.

Explain the advantages and disadvantages of GUI forensics tools.

Match each item with a statement below: -system file where passwords may have been written temporarily

Software forensic tools are grouped into command-line applications and ____________________ applications.

The NIST project that has as a goal to collect all known hash values for commercial software applications and OS files is ____.

When you research for computer forensics tools, strive for versatile, flexible, and robust tools that provide technical support.

Many vendors have developed write-blocking devices that connect to a computer through FireWire,____ 2.0,and SCSI controllers.

Match each item with a statement below: -a tower with several bays and many peripheral devices

Match each item with a statement below: -usually a laptop computer built into a carrying case with a small selection of peripheral options

____ is a simple drive-imaging station.

Explain the difference between repeatable results and reproducible results.

Match each item with a statement below: -one of the first MS-DOS tools used for a computer investigation

A forensics workstation consisting of a laptop computer with a built-in LCD monitor and almost as many bays and peripherals as a stationary workstation is also known as a ____.

After retrieving and examining evidence data with one tool, you should verify your results by performing the same tasks with other similar forensics tools.

What are the five major function categories of any computer forensics tool?

Computer Forensics and Investigations As a Profession

Understanding Computer Investigations

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Working With Windows and Dos Systems

Macintosh and Linux Boot Processes and File Systems

Computer Forensics Analysis and Validation

Recovering Graphics Files

Virtual Machines, Network Forensics, and Live Acquisitions

E-Mail Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High-Tech Investigations

Expert Testimony in High-Tech Investigations

Ethics for the Expert Witness

Filters

Exam 7: Current Computer Forensics Tools

Hardware manufacturers have designed most computer components to last about ____________________ months between failures.

The Windows platforms have long been the primary command-line interface OSs.

To help determine what computer forensics tool to purchase, a comparison table of functions, subfunctions, and vendor products is useful.

What are some of the advantages of using command-line forensics tools?

To make a disk acquisition with En.exe requires only a PC running ____ with a 12-volt power connector and an IDE, a SATA, or a SCSI connector cable.

Illustrate the use of a write-blocker on a Windows environment.

Explain the advantages and disadvantages of GUI forensics tools.

Match each item with a statement below: -system file where passwords may have been written temporarily

Software forensic tools are grouped into command-line applications and ____________________ applications.

The NIST project that has as a goal to collect all known hash values for commercial software applications and OS files is ____.

When you research for computer forensics tools, strive for versatile, flexible, and robust tools that provide technical support.

Many vendors have developed write-blocking devices that connect to a computer through FireWire,____ 2.0,and SCSI controllers.

Match each item with a statement below: -a tower with several bays and many peripheral devices

Match each item with a statement below: -usually a laptop computer built into a carrying case with a small selection of peripheral options

____ is a simple drive-imaging station.

Explain the difference between repeatable results and reproducible results.

Match each item with a statement below: -one of the first MS-DOS tools used for a computer investigation

A forensics workstation consisting of a laptop computer with a built-in LCD monitor and almost as many bays and peripherals as a stationary workstation is also known as a ____.

After retrieving and examining evidence data with one tool, you should verify your results by performing the same tasks with other similar forensics tools.

What are the five major function categories of any computer forensics tool?

Computer Forensics and Investigations As a Profession

Understanding Computer Investigations

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Working With Windows and Dos Systems

Macintosh and Linux Boot Processes and File Systems

Computer Forensics Analysis and Validation

Recovering Graphics Files

Virtual Machines, Network Forensics, and Live Acquisitions

E-Mail Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High-Tech Investigations

Expert Testimony in High-Tech Investigations

Ethics for the Expert Witness

Filters