WGUlD431lObjectivelAssessmentlReviewl (LatestlUpdate)lDigitallForensicslinl Cybersecurity|lQsl&lAs|lGradelAl100%l Correctl(VerifiedlAnswers)
Q:lWhichlmethodloflcopyingldigitallevidencelensureslproperlevidencelcollection?
A.lMakelthelcopylatlthelbit-level B.lCopylfileslusingldraglandldrop C.lMakelthelcopylusinglfileltransfer D.lCopylthellogicallpartitions
Answer:
A.lMakelthelcopylatlthelbit-level
Q:lWhichltypeloflstoragelformatlshouldlbeltransportedlinlalspeciallbagltolreducelelectrostaticl interference?
A.lSolid-stateldrives B.lOpticallmedia C.lDigitallaudioltapes D.lMagneticlmedia
Answer:
A.lSolid-stateldrives
Q:lWhichlWindowslcomponentlislresponsiblelforlreadinglthelboot.inilfilelandldisplayinglthelb ootlloaderlmenulonlWindowslXPlduringlthelbootlprocess?
- / 3
A.lNTLDR B.lNTOSKRNL C.lWindowslRegistry D.lWin32lsubsystem
Answer:
A.lNTLDR
Q:lThelfollowingllineloflcodelislanlexampleloflhowltolmakelalforensiclcopyloflalsuspectldriv
e:l
ddlif=/dev/memlof=/evidence/image.memory1l
Whichloperatinglsystemlshouldlbelusedltolrunlthislcommand?
A.lWindows B.lChrome C.lBlackBerryl D.lLinux
Answer:
D.lLinux
Q:lWhichlfilelsystemlislsupportedlbylMac?
A.lBerkeleylFastlFilelSysteml(FFS) B.lExtendedlFilelSysteml(Ext) C.lReiserlFilelSysteml(ReiserFS) D.lHierarchicallFilelSystemlPlusl(HFS+)
Answer:
D.lHierarchicallFilelSystemlPlusl(HFS+)
- / 3
Q:lWherelarellocallpasswordslstoredlforlthelWindowsloperatinglsystem?
A.lSAMlfilelinl\Windows\System32\ B.lSAMlfilelinl\Windows\Security\ C.lInlthelregistrylkeylHKEY_LOCAL_MACHINE \SYSTEM D.lInlthelregistrylkeylHKEY_LOCAL_MAHCINE \SECURITY
Answer:
A.lSAMlfilelinl\Windows\System32\
Q:lWherelonlalWindowslsystemlislthelconfiglfolderllocatedlthatlcontainslthelSAMlfile?
A.lC:\Windows\System32
B.lC:\Windows\SystemResources
C.lC:\ProgramlFiles
D.lC:\Users
Answer:
A.lC:\Windows\System32
Q:lWhatlshouldlalforensiclinvestigatorluseltolgatherlthelmostlreliablelroutinglinformationlforlt rackinglanlemaillmessage?
A.lEmaillheader B.lEmailladdress C.lTracert D.lNetstat
Answer:
A.lEmaillheader
- / 3