CHFI QUIZ

Recycle Bin ada sebagai metafora untuk membuang file, tetapi juga memungkinkan pengguna untuk mengambil dan memulihkan file. Setelah file dipindahkan ke Recycle Bin, sebuah catatan akan ditambahkan ke file log yang ada di Recycle Bin. Manakah dari file berikut ini yang berisi catatan yang sesuai dengan setiap file yang dihapus di Recycle Bin?

• INFO2

• LOGINFO1
• L0GINF02
• INFO 1

Amber, a black hat hacker, has embedded a malware into a small enticing advertisement and posted it on a popular ad-network that displays across various websites. What is she doing?

Compromising a legitimate site 1

Spearphishmg

Click-jacking

Malvertislng

• Click-jacking
• Spearphishing
• Compromising a legitimate site
• Malvertising

Which of the following methods of mobile device data acquisition captures ail the data present on the device, as weli as all deleted data and access to unallocated space?

• Physical acquisition
• Logical acquisition
• Manual acquisition
• Direct acquisition

An EC2 instance storing critical data of a company got infected with malware. The forensics team took the EBS volume snapshot of the affected instance to perform further analysis and collected other data of evidentiary value. What should be their next step?

• They should terminate the instance after taking necessary backup
• They should keep the instance running as it stores critical data
• They should pause the running instance
• They should terminate all instances connected via the same VPC

Which of the following are small pieces of data sent from a website and stored on the user’s computer by the user's web browser to track,validate, and maintain specific user information?

• Web Browser Cache
• Cookies
• Temporary Files
• Open files

POP3 is an Internet protocol used to retrieve emails from a mail server. Through which port does an email client connect with a POP3 server?

• 25
• 993
• 110
• 143

To which phase of the computer forensics investigation process does "planning and budgeting of a forensics lab" belong?

• Reporting phase
• Investigation phase
• Post-Investigation phase
• Pre-investigation phase

................ allows a forensic investigator to identify the missing links during investigation,

• Evidence preservation
• Exhibit numbering
• Chain of custody
• Evidence reconstruction

What command-line tool enables forensic investigator to establish communication between an Android device and a forensic workstation in order to perform data acquisition from the device?

• APK Analyzer
• SDK Manager
• Xcode
• Android Debug Bridge

Which ISO standard enables laboratories to demonstrate that they comply with quality assurance and provide valid results?

• ISO/IEC 17025
• ISO/lEC 18025
• ISO/IEC I9025
• ISO/IEC 16025