C S+ U11

Which of the following solutions typically consists of physical storage devices or networked data centers that are created and maintained locally?

• Storage Area Network (SAN)

• Network-Attached Storage (NAS)

• Onsite backup

• Offsite backup

In command line, what command would be used to run a network exploration and security/port scan?

• grep

• ping

• dig

• nmap

Which of the following would be the best tool to use to utilize cryptographic tools?

• OpenSSL

• SSH

• PowerShell

• Python

Which forensics tool is used to copy everything from a file and then copy it to a separate storage device?

• FTK imager

• WinHex

• Autopsy

• Memdump

What command combines the results of ping and traceroute?

• nslookup

• arp

• curl

• pathping

Which of the following is NOT a step to the acquisition of evidence?

• Who has the evidence now?

• Who collected the evidence?

• Why was the evidence collected?

• How was the evidence stored?

Ahmad is conducting a digital investigation where he is looking through emails, business communications, and other data used by a company. What is this called?

• E-Discovery

• Preservation

• Provenance

• Nonrepudiation

Company XYZ experienced a tornado that destroyed one of their buildings. However, Company XYZ practiced redundancy and did not have all backups located in the same building. By storing their backups in multiple locations, Company XYZ utilized which of the following?

• Geographic dispersion

• High availability redundancy

• Load balancing

• Dual supply

In digital forensics, owners of specific documents may hold onto crucial evidence in case further legal action is taken for an event. The written instructions to do this are called what?

• Cease and Desist

• Legal Hold

• Admissibility

• Chain of custody

Which of the following are examples of metadata? Choose all that apply.

• Filename creation information

• Time and location

• Access privileges

• Search history