Digital Evidence: Common Terms Quiz

What is Unallocated Space?

• Unallocated space refers to the portion of a hard drive that people can use to save new files.

• the area on a hard drive already containing files

Which term describes a verifiable procedure for sanitizing digital media?

• Data Extraction

• Forensic Wipe

• Write Block

• Partition

What is a hash value used for in digital forensics?

• To partition a hard drive

• To substantiate the integrity of digital evidence

• To organize files in a directory

• To encrypt data for secure transmission

What does metadata typically describe?

• The encryption method used on a file

• The structure of a file format

• A file or directory, including storage locations and permissions

• The source code of a program

What is the function of a write block or write protect?

• To encrypt data for secure storage

• To extract hidden data from a file

• To prevent modification of content on a media storage unit

• To create a duplicate copy of data

Which of the following is NOT considered a handheld (mobile) device?

• GPS Navigation System

• Desktop Computer

• Digital Camera

• Smartphone

What is cloud computing?

• A method of encrypting data for secure transmission

• Software and storage accessed via the Internet

• A process of extracting data from a corrupted file

• A type of handheld device

What is a log file?

• A section of a hard drive used to hide information

• A file that contains encrypted data

• A record of actions, events, and related data

• A duplicate copy of digital evidence

What is the purpose of a work copy in digital forensics?

• To encrypt data for secure storage

• To prevent unauthorized access to digital media

• To serve as a backup in case of data loss

• To be used for subsequent processing and analysis

What type of challenge involves analyzing memory dumps, network traffic captures, or disk images to find hidden information?

• Exploitation

• Forensics

• Steganography

• Reverse Engineering