Question 1

Evaluation of the ________ and unused space on the physical drive may identify the file systems present and determine if the entire physical size of the hard disk is accounted for.

Accepted Answer

The answer of Evaluation of the ________ and unused space...

Question 2

Extraction of a file pertinent to an examination may be based on the file name and extension, file header, file content, and location on the drive.

Accepted Answer

A) True 
 B)False

Question 3

The cluster size for a particular device is specified in which of the following?

Accepted Answer

A)  master boot record 
B)  read-only memory 
C)  BIOS parameter block 
D)  file allocation table

Question 4

A file system is the disk management platform employed by a particular operating system.

Accepted Answer

A) True 
 B)False

Question 5

Which of the following is a single circular disk with concentric tracks that are turned by spindles under one or more heads?

Accepted Answer

A)  logical drive 
B)  sector 
C)  fixed disk 
D)  floppy disk

Question 6

Microsoft's ________ provides more security and is more efficient in terms of utilization of storage space than FAT.

Accepted Answer

The answer of Microsoft's ________ provides more security and is...

Question 7

A file system is the combination of a hardware device and computer instructions and data that reside as read-only software on that device.

Accepted Answer

A) True 
 B)False

Question 8

ASCII code for defining characters is based on ________ code.

Accepted Answer

A)  hexadecimal 
B)  binary 
C)  RAM 
D)  sector

Question 9

Explain how over-reliance on automated programs and self-proclaimed experts pose a problem in computer investigations.How can this problem be overcome?

Accepted Answer

The answer of Explain how over-reliance on automated programs and...

Question 10

What is the first step in the development of computer forensic capabilities? Describe the minimum hardware requirements for a dream field system.

Accepted Answer

The answer of What is the first step in the...

Question 11

The ________ determines the size of the appropriate FAT based on the number of clusters necessary to represent the entire disk space.

Accepted Answer

The answer of The ________ determines the size of the...

Question 12

Which of the following tools are the most popular and stand-alone imaging utilities employed for forensic investigators?

Accepted Answer

A)  EnCase and FastBloc 
B)  ByteBack and Safeback 
C)  DECLASFY and BRANDIT 
D)  Data Dumper and Grep

Question 13

Which lab system is capable of handling larger workloads simultaneously?

Accepted Answer

A)  Better Lab System 
B)  Dream Lab System 
C)  Power Lab System 
D)  Basic Lab System

Question 14

Raw image files increase the costs associated with the maintenance of forensic laboratories and software libraries because they exhibit backward compatibility issues.

Accepted Answer

A) True 
 B)False

Question 15

Discuss the development within mobile device forensic tools and suggest issues that need to be addressed to improve them.

Accepted Answer

The answer of Discuss the development within mobile device forensic...

Question 16

________ can be used to identify and eliminate known files through the comparison of calculated hash values to authenticated hash values.

Accepted Answer

The answer of ________ can be used to identify and...

Question 17

Computer forensics helps ________ in pre-search warrant preparations and post-seizure handling of computer equipment.

Accepted Answer

The answer of Computer forensics helps ________ in pre-search warrant...

Question 18

Which of the following is NOT a traditional problem in computer investigations?

Accepted Answer

A)  inadequate resources 
B)  lack of mechanisms for interpreting and relaying highly technical information 
C)  lack of communication and cooperation among agencies 
D)  evidence corruption

Question 19

The logical file size refers to the exact size of a file in bytes.

Accepted Answer

A) True 
 B)False

Question 20

File systems allow end-users to perceive their document as multiple streams of bytes while providing for its storage in contiguous sectors.

Accepted Answer

A) True 
 B)False

Exam 10: Computer Forensics: Terminology and Requirements

Evaluation of the ________ and unused space on the physical drive may identify the file systems present and determine if the entire physical size of the hard disk is accounted for.

Extraction of a file pertinent to an examination may be based on the file name and extension, file header, file content, and location on the drive.

The cluster size for a particular device is specified in which of the following?

A file system is the disk management platform employed by a particular operating system.

Which of the following is a single circular disk with concentric tracks that are turned by spindles under one or more heads?

Microsoft's ________ provides more security and is more efficient in terms of utilization of storage space than FAT.

A file system is the combination of a hardware device and computer instructions and data that reside as read-only software on that device.

ASCII code for defining characters is based on ________ code.

Explain how over-reliance on automated programs and self-proclaimed experts pose a problem in computer investigations.How can this problem be overcome?

What is the first step in the development of computer forensic capabilities? Describe the minimum hardware requirements for a dream field system.

The ________ determines the size of the appropriate FAT based on the number of clusters necessary to represent the entire disk space.

Which of the following tools are the most popular and stand-alone imaging utilities employed for forensic investigators?

Which lab system is capable of handling larger workloads simultaneously?

Raw image files increase the costs associated with the maintenance of forensic laboratories and software libraries because they exhibit backward compatibility issues.

Discuss the development within mobile device forensic tools and suggest issues that need to be addressed to improve them.

________ can be used to identify and eliminate known files through the comparison of calculated hash values to authenticated hash values.

Computer forensics helps ________ in pre-search warrant preparations and post-seizure handling of computer equipment.

Which of the following is NOT a traditional problem in computer investigations?

The logical file size refers to the exact size of a file in bytes.

File systems allow end-users to perceive their document as multiple streams of bytes while providing for its storage in contiguous sectors.