Digital Forensics Quiz 3

Developed Rapid Action Imaging Device(RAID) to make forensically sound disk copies

• DIBS USA

• ProDiscover

• EnCase

• ILook

Image files can be reduced by as much as __% of the original

• 10

• 30

• 50

• 75

If your time is limited, consider using a logical acquisition or__acquisition data copy method

• lossless

• disk-to-disk

• sparse

• disk-to-image

Linux ISO images are referred to as__

• ISO CDs

• Live CDs

• Forensic Linux

• Linux in a Box

This command displays pages from online help manual for info on Linux commands & their options

• hlp

• inst

• man

• cmd

For computer forensics,__is the task of collecting digital evidence from electronic media

• data acquisition

• hashing

• lossy compression

• lossless compression

This format acquisition can't share an image between different vendors' forensic analysis tools

• AFF

• raw

• proprietary

• AFD

This acquisition is typically done on a computer seized during a police raid

• live

• real-time

• online

• static

If a computer has an encrypted drive,a__acquisition is done if the password is available

• live

• passive

• static

• local

The most common and flexible data-acquisition method is__

• Disk-to-disk copy

• Disk-to-network copy

• Sparse data copy

• Disk-to-image file copy