NIST 800-86

Which one of these is not a basic phases go Digital Forensics

• Collection
• Analysis
• Reporting
• Preservation
• Examination

What is the primary goal of digital forensics?

• Collect evidence for criminal investigations
• Recover deleted data
• Restore damaged systems
• Enhance system performance

Which one of the following is not part of Forensic staffing?

• Investigators
• IT professionals
• Incident Handlers
• HR Staff
• APT Actor

Which of the following is an example of volatile data?

• A saved document on hard drive

• A web browser history

• A file that has been deleted

• A backup file on remote server

Which file system is used in Mac?

• HFS
• FAT 16
• UFS
• NTFS

Which of the following perform perform packet sniffing and analyze network traffic to identify suspicious activity and record relevant information

• Host IDS
• Network IDS
• Anti-virus
• EDR

What is the purpose of hashing data during the forensic process?

• To recover deleted data
• To verify the integrity of the data
• To access encrypted files
• To analyze metadata

Which of the following is not a common source of digital evidence?

• Social Media
• Email
• Network logs
• Physical evidence at a crime scene

Which of the following is a common forensic tool used to create an exact image of a hard drive?

• Wireshark
• FTK Imager
• Nmap
• Nessus

Which is not a type of interactive communication application?

• Group Chat
• Instant Messaging applications
• VoIP
• File Compression tool