Question 1

________ data is data that has been deleted but not erased.

Accepted Answer

The answer of ________ data is data that has been...

Question 2

Match the following types of files to their description.
-Drive slack

Accepted Answer

A)  Unique digital signature of data 
B)  Additional sectors created to fill a cluster 
C)  Application that prevents changes to a hard drive 
D)  Captures a "snapshot" of everything on the drive 
E)  Mathematical computations that validate a copy 
A)  Unique digital signature of data 
B)  Additional sectors created to fill a cluster 
C)  Application that prevents changes to a hard drive 
D)  Captures a "snapshot" of everything on the drive 
E)  Mathematical computations that validate a copy

Question 3

If you need to remove a password from files,you could use a program such as

Accepted Answer

A) Jack the Cracker 
B) WinHex 
C) MacQuisition 
D) John the Ripper 
A) Jack the Cracker 
B) WinHex 
C) MacQuisition 
D) John the Ripper

Question 4

One ________ can be saved on numerous servers and be forwarded to a person unknown to its author.

Accepted Answer

The answer of One ________ can be saved on numerous...

Question 5

A computer forensic specialist may examine the ________ to ascertain the true identity of a file.

Accepted Answer

The answer of A computer forensic specialist may examine the...

Question 6

Encase softwarecan be used for all e-mail investigations EXCEPT which of the following?

Accepted Answer

A) GoogleMail 
B) Hotmail 
C) Outlook 
D) AOL 
A) GoogleMail 
B) Hotmail 
C) Outlook 
D) AOL

Question 7

Match the following terms to their meanings.
-Deleted files

Accepted Answer

A)  A file renamed to look like an operating system file 
B)  Data easily viewed through file manager programs 
C)  Cache files and history files 
D)  File space that is now available for being written to 
A)  A file renamed to look like an operating system file 
B)  Data easily viewed through file manager programs 
C)  Cache files and history files 
D)  File space that is now available for being written to

Question 8

Match the following terms to their meanings.
-Hidden data

Accepted Answer

A)  A file renamed to look like an operating system file 
B)  Data easily viewed through file manager programs 
C)  Cache files and history files 
D)  File space that is now available for being written to 
A)  A file renamed to look like an operating system file 
B)  Data easily viewed through file manager programs 
C)  Cache files and history files 
D)  File space that is now available for being written to

Question 9

Which of the following tasks should be performed to maximize search results?

Accepted Answer

A) Confirm the objective of the investigation. 
B) Identify relevant time periods. 
C) Identify relevant types of data. 
D) All are correct. 
A) Confirm the objective of the investigation. 
B) Identify relevant time periods. 
C) Identify relevant types of data. 
D) All are correct.

Question 10

Match the following forensic tools with their attributes.
-BlackBag

Accepted Answer

A)  The universal hexadecimal editor 
B)  Invaluable for combing through large amounts of data 
C)  Exclusively for Macs 
D)  AccessData tool designed for finding and examining evidence 
E)  Primarily for computer crime investigators 
A)  The universal hexadecimal editor 
B)  Invaluable for combing through large amounts of data 
C)  Exclusively for Macs 
D)  AccessData tool designed for finding and examining evidence 
E)  Primarily for computer crime investigators

________ data is data that has been deleted but not erased.

Match the following types of files to their description. -Drive slack

If you need to remove a password from files,you could use a program such as

One ________ can be saved on numerous servers and be forwarded to a person unknown to its author.

A computer forensic specialist may examine the ________ to ascertain the true identity of a file.

Encase softwarecan be used for all e-mail investigations EXCEPT which of the following?

Match the following terms to their meanings. -Deleted files

Match the following terms to their meanings. -Hidden data

Which of the following tasks should be performed to maximize search results?

Match the following forensic tools with their attributes. -BlackBag

Forensic Evidence and Crime Investigation

Computer Forensics Anddigital Detective Work

Policies and Procedures

Data, PDA, and Cell Phone Forensics

Operating Systems and Data Transmission Basics for Digital Investigations

Investigating Windows, linux, and Graphic Files

E-Mail and Webmail Forensics

Internet and Network Forensics and Intrusion Detection

Tracking Down Those Who Intend to Do Harm on a Large Scale

Fraud and Forensic Accounting Investigation

Federal Rules and Criminal Codes

Ethical and Professional Responsibility in Testimony

Filters

Exam 3: Tools, Environments, Equipment, and Certifications

________ data is data that has been deleted but not erased.

Match the following types of files to their description. -Drive slack

If you need to remove a password from files,you could use a program such as

One ________ can be saved on numerous servers and be forwarded to a person unknown to its author.

A computer forensic specialist may examine the ________ to ascertain the true identity of a file.

Encase softwarecan be used for all e-mail investigations EXCEPT which of the following?

Match the following terms to their meanings. -Deleted files

Match the following terms to their meanings. -Hidden data

Which of the following tasks should be performed to maximize search results?

Match the following forensic tools with their attributes. -BlackBag

Forensic Evidence and Crime Investigation

Computer Forensics Anddigital Detective Work

Policies and Procedures

Data, PDA, and Cell Phone Forensics

Operating Systems and Data Transmission Basics for Digital Investigations

Investigating Windows, linux, and Graphic Files

E-Mail and Webmail Forensics

Internet and Network Forensics and Intrusion Detection

Tracking Down Those Who Intend to Do Harm on a Large Scale

Fraud and Forensic Accounting Investigation

Federal Rules and Criminal Codes

Ethical and Professional Responsibility in Testimony

Filters