Question 1

The ______________ tool can be used to bypass a virtual machine's hypervisor, and can be used with OpenStack.

Accepted Answer

A) ​OpenForensics 
B) ​FROST 
C) WinHex 
D) ARC 
A) ​OpenForensics 
B) ​FROST 
C) WinHex 
D) ARC B

Question 2

In the United States, the Electronic Communications Privacy Act (ECPA) describes 5 mechanisms the government can use to get electronic information from a provider.​

Accepted Answer

A) True 
 B)False  True

Question 3

What information below is not something recorded in Google Drive's snapshot.db file?​

Accepted Answer

A) ​file access records 
B) ​URL pathnames 
C) modified and created times 
D)  file SHA values and sizes 
A) ​file access records 
B) ​URL pathnames 
C) modified and created times 
D)  file SHA values and sizes D

Question 4

Specially trained system and network administrators are often a CSP's first responders.​

Accepted Answer

A) True 
 B)False

Question 5

The __________________ file contains cid (client ID), clientType, clientVersion, device, deviceID, and timeUtc values relevant to OneDrive.

Accepted Answer

The answer of The __________________ file contains cid (client ID),...

Question 6

What cloud service listed below provides a freeware type 1 hypervisor used for public and private clouds?​

Accepted Answer

A) ​Cisco Cloud Computing 
B) ​Amazon EC2 
C) XenServer and XenCenter Windows Management Console 
D) HP Helion 
A) ​Cisco Cloud Computing 
B) ​Amazon EC2 
C) XenServer and XenCenter Windows Management Console 
D) HP Helion

Question 7

Math each item with a statement below
-Destroying, altering, hiding, or failing to preserve evidence, whether it's intentional or a result of negligence.?

Accepted Answer

A) cloud service providers (CSPs) 
B) community cloud 
C) deprovisioning 
D) hybrid cloud 
E) infrastructure as a service (IaaS)
F)multitenancy
G)private cloud
H)provisioning
I)public cloud
J)spoliation 
A) cloud service providers (CSPs) 
B) community cloud 
C) deprovisioning 
D) hybrid cloud 
E) infrastructure as a service (IaaS)
F)multitenancy
G)private cloud
H)provisioning
I)public cloud
J)spoliation

Question 8

Metadata in a prefetch file contains an application's _____________ times in UTC format and a counter of how many times the application has run since the prefect file was created.​

Accepted Answer

A) ​MAC 
B) ​ACL 
C) startup ​/ access 
D) log event 
A) ​MAC 
B) ​ACL 
C) startup ​/ access 
D) log event

Question 9

​At what offset is a prefetch file's create date & time located?

Accepted Answer

A) ​0x80 
B) ​0x88 
C) 0x90 
D) 0x98 
A) ​0x80 
B) ​0x88 
C) 0x90 
D) 0x98

Question 10

The __________________________ is an organization that has developed resource documentation for CSPs and their staff. It provides guidance for privacy agreements, security measures, questionnaires, and more.​

Accepted Answer

A) ​OpenStack Framework Alliance 
B) ​Cloud Security Alliance 
C) Cloud Architecture Group 
D) vCloud Security Advisory Panel 
A) ​OpenStack Framework Alliance 
B) ​Cloud Security Alliance 
C) Cloud Architecture Group 
D) vCloud Security Advisory Panel

Question 11

Explain what a court order is, and describe how it is used.

Accepted Answer

Court orders are written by judges to co

Question 12

Explain why digital forensics examiners should be most concerned with restrictions applied to customers and security measures.​

Accepted Answer

Digital forensics examiners should be mo

Question 13

Which is not a valid method of deployment for a cloud?​

Accepted Answer

A) ​public 
B) ​private 
C) community 
D) targeted 
A) ​public 
B) ​private 
C) community 
D) targeted

Question 14

Math each item with a statement below
-A shared cloud service that provides access to common or shared data.?

Accepted Answer

A) cloud service providers (CSPs) 
B) community cloud 
C) deprovisioning 
D) hybrid cloud 
E) infrastructure as a service (IaaS)
F)multitenancy
G)private cloud
H)provisioning
I)public cloud
J)spoliation 
A) cloud service providers (CSPs) 
B) community cloud 
C) deprovisioning 
D) hybrid cloud 
E) infrastructure as a service (IaaS)
F)multitenancy
G)private cloud
H)provisioning
I)public cloud
J)spoliation

Question 15

Which of the following is not one of the five mechanisms the government can use to get electronic information from a provider?​

Accepted Answer

A) search warrants 
B) ​subpoenas 
C) court orders 
D) seizure order 
A) search warrants 
B) ​subpoenas 
C) court orders 
D) seizure order

Question 16

Math each item with a statement below
-Deallocating cloud resources that were assigned to a user or an organization.?

Accepted Answer

A) cloud service providers (CSPs) 
B) community cloud 
C) deprovisioning 
D) hybrid cloud 
E) infrastructure as a service (IaaS)
F)multitenancy
G)private cloud
H)provisioning
I)public cloud
J)spoliation 
A) cloud service providers (CSPs) 
B) community cloud 
C) deprovisioning 
D) hybrid cloud 
E) infrastructure as a service (IaaS)
F)multitenancy
G)private cloud
H)provisioning
I)public cloud
J)spoliation

Question 17

A search warrant can be used in any kind of case, either civil or criminal.​

Accepted Answer

A) True 
 B)False

Question 18

A _____________ is a contract between a CSP and a customer that describes what services are being provided and at what level.​

Accepted Answer

service le

Question 19

The Google drive file _________________ contains a detailed list of a user's cloud transactions.​

Accepted Answer

A) ​loggedtransactions.log 
B) ​sync_log.log 
C) transact_user.db 
D) history.db 
A) ​loggedtransactions.log 
B) ​sync_log.log 
C) transact_user.db 
D) history.db

Question 20

A _________________ is a tool with application programming interfaces (APIs) that allow reconfiguring a cloud on the fly; it's accessed through the application's Web interface.​

Accepted Answer

A) ​programming language 
B) ​management plane 
C) backdoor 
D) configuration manager 
A) ​programming language 
B) ​management plane 
C) backdoor 
D) configuration manager

The ______________ tool can be used to bypass a virtual machine's hypervisor, and can be used with OpenStack.

In the United States, the Electronic Communications Privacy Act (ECPA) describes 5 mechanisms the government can use to get electronic information from a provider.

What information below is not something recorded in Google Drive's snapshot.db file?

Specially trained system and network administrators are often a CSP's first responders.

The __________________ file contains cid (client ID), clientType, clientVersion, device, deviceID, and timeUtc values relevant to OneDrive.

What cloud service listed below provides a freeware type 1 hypervisor used for public and private clouds?

Math each item with a statement below -Destroying, altering, hiding, or failing to preserve evidence, whether it's intentional or a result of negligence.?

Metadata in a prefetch file contains an application's _____________ times in UTC format and a counter of how many times the application has run since the prefect file was created.

At what offset is a prefetch file's create date & time located?

The __________________________ is an organization that has developed resource documentation for CSPs and their staff. It provides guidance for privacy agreements, security measures, questionnaires, and more.

Explain what a court order is, and describe how it is used.

Explain why digital forensics examiners should be most concerned with restrictions applied to customers and security measures.

Which is not a valid method of deployment for a cloud?

Math each item with a statement below -A shared cloud service that provides access to common or shared data.?

Which of the following is not one of the five mechanisms the government can use to get electronic information from a provider?

Math each item with a statement below -Deallocating cloud resources that were assigned to a user or an organization.?

A search warrant can be used in any kind of case, either civil or criminal.

A _____________ is a contract between a CSP and a customer that describes what services are being provided and at what level.

The Google drive file _________________ contains a detailed list of a user's cloud transactions.

A _________________ is a tool with application programming interfaces (APIs) that allow reconfiguring a cloud on the fly; it's accessed through the application's Web interface.

Understanding the Digital Forensics Profession and Investigations

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Working With Windows and Cli Systems

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Recovering Graphics Files

Computer Forensics Analysis and Validation

Virtual Machine and Cloud Forensics

Live Acquisitions and Network Forensics

Email Investigations

Report Writing for High Tech Investigations

Expert Testimony in High Tech Investigations

Ethics for the Investigator and Expert Witness

Filters

Exam 13: Cell Phone and Mobile Device Forensics

The ______________ tool can be used to bypass a virtual machine's hypervisor, and can be used with OpenStack.

In the United States, the Electronic Communications Privacy Act (ECPA) describes 5 mechanisms the government can use to get electronic information from a provider.​

What information below is not something recorded in Google Drive's snapshot.db file?​

Specially trained system and network administrators are often a CSP's first responders.​

The __________________ file contains cid (client ID), clientType, clientVersion, device, deviceID, and timeUtc values relevant to OneDrive.

What cloud service listed below provides a freeware type 1 hypervisor used for public and private clouds?​

Math each item with a statement below -Destroying, altering, hiding, or failing to preserve evidence, whether it's intentional or a result of negligence.?

Metadata in a prefetch file contains an application's _____________ times in UTC format and a counter of how many times the application has run since the prefect file was created.​

​At what offset is a prefetch file's create date & time located?

The __________________________ is an organization that has developed resource documentation for CSPs and their staff. It provides guidance for privacy agreements, security measures, questionnaires, and more.​

Explain what a court order is, and describe how it is used.

Explain why digital forensics examiners should be most concerned with restrictions applied to customers and security measures.​

Which is not a valid method of deployment for a cloud?​

Math each item with a statement below -A shared cloud service that provides access to common or shared data.?

Which of the following is not one of the five mechanisms the government can use to get electronic information from a provider?​

Math each item with a statement below -Deallocating cloud resources that were assigned to a user or an organization.?

A search warrant can be used in any kind of case, either civil or criminal.​

A _____________ is a contract between a CSP and a customer that describes what services are being provided and at what level.​

The Google drive file _________________ contains a detailed list of a user's cloud transactions.​

A _________________ is a tool with application programming interfaces (APIs) that allow reconfiguring a cloud on the fly; it's accessed through the application's Web interface.​

Understanding the Digital Forensics Profession and Investigations

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Working With Windows and Cli Systems

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Recovering Graphics Files

Computer Forensics Analysis and Validation

Virtual Machine and Cloud Forensics

Live Acquisitions and Network Forensics

Email Investigations

Report Writing for High Tech Investigations

Expert Testimony in High Tech Investigations

Ethics for the Investigator and Expert Witness

Filters

In the United States, the Electronic Communications Privacy Act (ECPA) describes 5 mechanisms the government can use to get electronic information from a provider.

What information below is not something recorded in Google Drive's snapshot.db file?

Specially trained system and network administrators are often a CSP's first responders.

What cloud service listed below provides a freeware type 1 hypervisor used for public and private clouds?

Metadata in a prefetch file contains an application's _____________ times in UTC format and a counter of how many times the application has run since the prefect file was created.

At what offset is a prefetch file's create date & time located?

The __________________________ is an organization that has developed resource documentation for CSPs and their staff. It provides guidance for privacy agreements, security measures, questionnaires, and more.

Explain why digital forensics examiners should be most concerned with restrictions applied to customers and security measures.

Which is not a valid method of deployment for a cloud?

Which of the following is not one of the five mechanisms the government can use to get electronic information from a provider?

A search warrant can be used in any kind of case, either civil or criminal.

A _____________ is a contract between a CSP and a customer that describes what services are being provided and at what level.

The Google drive file _________________ contains a detailed list of a user's cloud transactions.

A _________________ is a tool with application programming interfaces (APIs) that allow reconfiguring a cloud on the fly; it's accessed through the application's Web interface.