Exam 9: Computer Forensics Analysis and Validation

The AccessData program has a hashing database, ________________, which is available only with FTK, and can be used to filter known program files from view and contains the hash values of known illegal files.

(Multiple Choice)

4.7/5

(37)

Question 21

Match the following terms with the correct definitions below:? -?The pnrocess of shifting one or more digits in a binary number to the left or right to produce a different value.

(Multiple Choice)

4.7/5

(31)

Question 22

Many commercial encryption programs use a technology called _____________, which is designed to recover encrypted data if users forget their passphrases or if the user key is corrupted after a system failure.

(Multiple Choice)

4.9/5

(50)

Question 23

Match the following terms with the correct definitions below:? -?In steganalysis, the file containing the hidden message.

(Multiple Choice)

4.7/5

(30)

Question 24

Explain what a digital watermark is and how it's used with data.

(Essay)

4.9/5

(34)

Question 25

Select the tool below that does not use dictionary attacks or brute force attacks to crack passwords:

(Multiple Choice)

4.9/5

(34)

Question 26

In addition to steganography, _____________________ was developed as a way to protect file ownership.

(Short Answer)

4.8/5

(38)

Question 27

Match the following terms with the correct definitions below:? -?In steganalysis, the original file with no hidden message.

(Multiple Choice)

4.8/5

(34)

Question 28

The term for detecting and analyzing steganography files is _________________.

(Multiple Choice)

4.8/5

(28)

Question 29

In Windows, the ______________ command can be used to both hide and reveal partitions within Explorer.

(Multiple Choice)

4.9/5

(41)

Question 30

Match the following terms with the correct definitions below:? -?A cryptographic technique for embedding information in another file for the purpose of hiding the information from casual observers.

(Multiple Choice)

4.8/5

(28)

Question 31

List and explain the five steganalysis methods described by Neil F. Johnson and Sushil Jajodia.

(Essay)

4.8/5

(38)

Question 32

In which file system can you hide data by placing sensitive or incriminating data in free or slack space on disk partition clusters?

(Multiple Choice)

4.8/5

(31)

Question 33

Because attorneys do not have the right of full discovery of digital evidence, it is not possible for new evidence to come to light while complying with a defense request for full discovery.

(True/False)

4.7/5

(46)

Question 34

In private sector cases, like criminal and civil cases, the scope is always defined by a search warrant.

(True/False)

4.7/5

(36)

Question 35

Within Windows Vista and later, partition gaps are _____________ bytes in length.

(Multiple Choice)

4.8/5

(38)

Question 36

The _______________________ maintains a national database of updated file hash values for a variety of OSs, applications, and images, but does not list hash values of known illegal files.

(Multiple Choice)

4.7/5

(38)

Question 37

The advantage of recording hash values is that you can determine whether data has changed.

(True/False)

4.9/5

(34)

Question 38

Which of the following file systems can't be analyzed by OSForensics?

(Multiple Choice)

4.8/5

(38)

Question 39

Describe the process of block-wise hashing.

(Essay)

4.9/5

(38)

Question 40

Showing 21 - 40 of 50

The AccessData program has a hashing database, ________________, which is available only with FTK, and can be used to filter known program files from view and contains the hash values of known illegal files.

Match the following terms with the correct definitions below:? -?The pnrocess of shifting one or more digits in a binary number to the left or right to produce a different value.

Many commercial encryption programs use a technology called _____________, which is designed to recover encrypted data if users forget their passphrases or if the user key is corrupted after a system failure.

Match the following terms with the correct definitions below:? -?In steganalysis, the file containing the hidden message.

Explain what a digital watermark is and how it's used with data.

Select the tool below that does not use dictionary attacks or brute force attacks to crack passwords:

In addition to steganography, _____________________ was developed as a way to protect file ownership.

Match the following terms with the correct definitions below:? -?In steganalysis, the original file with no hidden message.

The term for detecting and analyzing steganography files is _________________.

In Windows, the ______________ command can be used to both hide and reveal partitions within Explorer.

Match the following terms with the correct definitions below:? -?A cryptographic technique for embedding information in another file for the purpose of hiding the information from casual observers.

List and explain the five steganalysis methods described by Neil F. Johnson and Sushil Jajodia.

In which file system can you hide data by placing sensitive or incriminating data in free or slack space on disk partition clusters?

Because attorneys do not have the right of full discovery of digital evidence, it is not possible for new evidence to come to light while complying with a defense request for full discovery.

In private sector cases, like criminal and civil cases, the scope is always defined by a search warrant.

Within Windows Vista and later, partition gaps are _____________ bytes in length.

The _______________________ maintains a national database of updated file hash values for a variety of OSs, applications, and images, but does not list hash values of known illegal files.

The advantage of recording hash values is that you can determine whether data has changed.

Which of the following file systems can't be analyzed by OSForensics?

Describe the process of block-wise hashing.

Understanding the Digital Forensics Profession and Investigations

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Working With Windows and Cli Systems

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Recovering Graphics Files

Virtual Machine and Cloud Forensics

Live Acquisitions and Network Forensics

Email Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High Tech Investigations

Expert Testimony in High Tech Investigations

Ethics for the Investigator and Expert Witness

Filters

Exam 9: Computer Forensics Analysis and Validation

The AccessData program has a hashing database, ________________, which is available only with FTK, and can be used to filter known program files from view and contains the hash values of known illegal files.​

Match the following terms with the correct definitions below:? -?The pnrocess of shifting one or more digits in a binary number to the left or right to produce a different value.

Many commercial encryption programs use a technology called _____________, which is designed to recover encrypted data if users forget their passphrases or if the user key is corrupted after a system failure.​

Match the following terms with the correct definitions below:? -?In steganalysis, the file containing the hidden message.

Explain what a digital watermark is and how it's used with data.

​Select the tool below that does not use dictionary attacks or brute force attacks to crack passwords:

In addition to steganography, _____________________ was developed as a way to protect file ownership.​

Match the following terms with the correct definitions below:? -?In steganalysis, the original file with no hidden message.

The term for detecting and analyzing steganography files is _________________.​

​In Windows, the ______________ command can be used to both hide and reveal partitions within Explorer.

Match the following terms with the correct definitions below:? -?A cryptographic technique for embedding information in another file for the purpose of hiding the information from casual observers.

​List and explain the five steganalysis methods described by Neil F. Johnson and Sushil Jajodia.

​In which file system can you hide data by placing sensitive or incriminating data in free or slack space on disk partition clusters?

Because attorneys do not have the right of full discovery of digital evidence, it is not possible for new evidence to come to light while complying with a defense request for full discovery.​

In private sector cases, like criminal and civil cases, the scope is always defined by a search warrant.​

​Within Windows Vista and later, partition gaps are _____________ bytes in length.

The _______________________ maintains a national database of updated file hash values for a variety of OSs, applications, and images, but does not list hash values of known illegal files.​

The advantage of recording hash values is that you can determine whether data has changed.​

Which of the following file systems can't be analyzed by OSForensics?

Describe the process of block-wise hashing.​

Understanding the Digital Forensics Profession and Investigations

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Working With Windows and Cli Systems

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Recovering Graphics Files

Virtual Machine and Cloud Forensics

Live Acquisitions and Network Forensics

Email Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High Tech Investigations

Expert Testimony in High Tech Investigations

Ethics for the Investigator and Expert Witness

Filters

The AccessData program has a hashing database, ________________, which is available only with FTK, and can be used to filter known program files from view and contains the hash values of known illegal files.

Many commercial encryption programs use a technology called _____________, which is designed to recover encrypted data if users forget their passphrases or if the user key is corrupted after a system failure.

Select the tool below that does not use dictionary attacks or brute force attacks to crack passwords:

In addition to steganography, _____________________ was developed as a way to protect file ownership.

The term for detecting and analyzing steganography files is _________________.

In Windows, the ______________ command can be used to both hide and reveal partitions within Explorer.

List and explain the five steganalysis methods described by Neil F. Johnson and Sushil Jajodia.

In which file system can you hide data by placing sensitive or incriminating data in free or slack space on disk partition clusters?

Because attorneys do not have the right of full discovery of digital evidence, it is not possible for new evidence to come to light while complying with a defense request for full discovery.

In private sector cases, like criminal and civil cases, the scope is always defined by a search warrant.

Within Windows Vista and later, partition gaps are _____________ bytes in length.

The _______________________ maintains a national database of updated file hash values for a variety of OSs, applications, and images, but does not list hash values of known illegal files.

The advantage of recording hash values is that you can determine whether data has changed.

Describe the process of block-wise hashing.