Forensic Investigator - Quiz Exam

Digital evidence can't be time sensitive.

• TRUE

• FALSE

Digital evidence can be altered, damaged or destroyed with little effort.

• TRUE

• FALSE

At which stage of the digital forensics process would a write-blocker be used?

• Acquisition

• Reporting

• Verification

• Analysis

The process of copying data is known as:

• data acquisition

• data analysis

• data documentation

• data recovery

Harold, a fraud examiner, collects a computer hard drive as potential evidence in an investigation. He creates a memorandum to record the chain of custody and documents what item was received, when it was received, and from whom it was received. To meet the minimum standard for a chain of custody memorandum, what else would Harold need to include?

• The name of the judge who signed the seizure order, if applicable,

• The value of the noncash item received,

• An explanation of why the item was collected,

• Where the item is maintained

_______ is the practice of concealing a file, message, image, or video within another file, message, image, or video.

• Steganography

• Cryptography

• File hidding

• Media Analysis

Command to find out the internal ip using the dos prompt is ?

• ipscan

• itconfig

• ipconflict

• ipconfig

___is an example of social engineering techniques being used to deceive users. Users are often lured by communications purporting to be from trusted parties such as social web sites, auction sites, banks, online payment processors or IT administrators

• Phishing

• SQL Injection

• SMS Bombing

• Denial of Service

Hash Value is used to check the

_________________

• Confidentiality of the file

• Integrity of the file

• rationality of the file

• availability of the file

A ____value is a numeric value of a fixed length that uniquely identifies data.

• A. Hash

• B. Decimal

• C. Number

• D. Variable