Question 1

____________________ search catalogs all words on the evidence disk so that FTK can find them quickly.

Accepted Answer

The answer of ____________________ search catalogs all words on the...

Question 2

FTK cannot analyze data from image files from other vendors.

Accepted Answer

A) True 
 B)False

Question 3

Match each item with a statement below:
-limit a civil investigation

Accepted Answer

A) Court orders for discovery 
B) Investigation plan 
C) Digital Intelligence PDWipe 
D) Live search 
E) Cabinet
F)PRTK
G)Validating digital evidence
H)MD5
I)System Commander 
A) Court orders for discovery 
B) Investigation plan 
C) Digital Intelligence PDWipe 
D) Live search 
E) Cabinet
F)PRTK
G)Validating digital evidence
H)MD5
I)System Commander

Question 4

Data ____ involves changing or manipulating a file to conceal information.

Accepted Answer

A)  recovery 
B)  creep 
C)  integrity 
D)  hiding 
A)  recovery 
B)  creep 
C)  integrity 
D)  hiding

Question 5

Getting a hash value with a ____ is much faster and easier than with a(n) ____.

Accepted Answer

A)  high-level language, assembler 
B)  HTML editor, hexadecimal editor 
C)  computer forensics tool, hexadecimal editor 
D)  hexadecimal editor, computer forensics tool 
A)  high-level language, assembler 
B)  HTML editor, hexadecimal editor 
C)  computer forensics tool, hexadecimal editor 
D)  hexadecimal editor, computer forensics tool

Question 6

Match each item with a statement below:
-a hashing algorithm

Accepted Answer

A) Court orders for discovery 
B) Investigation plan 
C) Digital Intelligence PDWipe 
D) Live search 
E) Cabinet
F)PRTK
G)Validating digital evidence
H)MD5
I)System Commander 
A) Court orders for discovery 
B) Investigation plan 
C) Digital Intelligence PDWipe 
D) Live search 
E) Cabinet
F)PRTK
G)Validating digital evidence
H)MD5
I)System Commander

Question 7

____ increases the time and resources needed to extract,analyze,and present evidence.

Accepted Answer

A)  Investigation plan 
B)  Scope creep 
C)  Litigation path 
D)  Court order for discovery 
A)  Investigation plan 
B)  Scope creep 
C)  Litigation path 
D)  Court order for discovery

Question 8

How can you validate the integrity of raw format image files with ProDiscover?

Accepted Answer

In ProDiscover and other computer forens

Question 9

Match each item with a statement below:
-a type of compressed file

Accepted Answer

A) Court orders for discovery 
B) Investigation plan 
C) Digital Intelligence PDWipe 
D) Live search 
E) Cabinet
F)PRTK
G)Validating digital evidence
H)MD5
I)System Commander 
A) Court orders for discovery 
B) Investigation plan 
C) Digital Intelligence PDWipe 
D) Live search 
E) Cabinet
F)PRTK
G)Validating digital evidence
H)MD5
I)System Commander

Question 10

How does the Known File Filter program work?

Accepted Answer

AccessData has a separate program called

____________________ search catalogs all words on the evidence disk so that FTK can find them quickly.

FTK cannot analyze data from image files from other vendors.

Match each item with a statement below: -limit a civil investigation

Data ____ involves changing or manipulating a file to conceal information.

Getting a hash value with a is much faster and easier than with a(n) .

Match each item with a statement below: -a hashing algorithm

____ increases the time and resources needed to extract,analyze,and present evidence.

How can you validate the integrity of raw format image files with ProDiscover?

Match each item with a statement below: -a type of compressed file

How does the Known File Filter program work?

Computer Forensics and Investigations As a Profession

Understanding Computer Investigations

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Working With Windows and Dos Systems

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Recovering Graphics Files

Virtual Machines, Network Forensics, and Live Acquisitions

E-Mail Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High-Tech Investigations

Expert Testimony in High-Tech Investigations

Ethics for the Expert Witness

Filters

Exam 9: Computer Forensics Analysis and Validation

____________________ search catalogs all words on the evidence disk so that FTK can find them quickly.

FTK cannot analyze data from image files from other vendors.

Match each item with a statement below: -limit a civil investigation

Data ____ involves changing or manipulating a file to conceal information.

Getting a hash value with a ____ is much faster and easier than with a(n) ____.

Match each item with a statement below: -a hashing algorithm

____ increases the time and resources needed to extract,analyze,and present evidence.

How can you validate the integrity of raw format image files with ProDiscover?

Match each item with a statement below: -a type of compressed file

How does the Known File Filter program work?

Computer Forensics and Investigations As a Profession

Understanding Computer Investigations

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Working With Windows and Dos Systems

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Recovering Graphics Files

Virtual Machines, Network Forensics, and Live Acquisitions

E-Mail Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High-Tech Investigations

Expert Testimony in High-Tech Investigations

Ethics for the Expert Witness

Filters

Getting a hash value with a is much faster and easier than with a(n) .