CNET151 Ch 14 - Intro to Forensics

Front

Frequently, the first responder to a computer crime is the network administrator.

Back

True

Front

The netstat command is used with a forensic copy of a machine to compare two files and show the differences.

Back

False—This describes the fc command.

Front

The Windows Registry contains a list of USB devices that have been connected to the machine.

Back

True

Front

In Linux, the dd command is used to set up a target forensics server to receive a copy of a drive.

Back

False—This describes the netcat command.

Front

The chain of custody documents the handling of evidence from the moment of seizure until it is presented in court.

Back

True

Front

Most Windows logs are turned on automatically.

Back

False—If you don’t turn on logging, there won’t be anything in the logs.

Front

Windows stores information such as web addresses, search queries, and recently opened files in a file called index.dat.

Back

True

Front

Windows logging can be turned on and off with a tool called auditpol.exe.

Back

True

Front

The Windows fc command lists any active sessions connected to a computer.

Back

False—This describes the net sessions command.

Front

The Windows Registry is organized into five sections referred to as hives.

Back

True