Everything Computer Forensics

Windows 95 was the first OS to support this older file system?

• FAT32

• NTFS

• ReFS

This is about obfuscating a message so that it cannot be read?

• Cryptography

• Steganography

• Scientology

This calculation is used to calculate single loss expectency?

• SLE

• ALE

• NIST

_______________ memory analysis is a live-system forensic technique in which you collect a memory dump and perform analysis in an isolated environment?

• Static

• Volatile

• System

If the computer is turned on when you arrive, what does the Secret Service recommend you do?

• Begin investigation immediately

• Shut the computer down according to the recommended Secret Service procedure

• Transport the computer with power on

Which of the following might contain data that was live in memory and not stored on the hard-drive?

• Swap File

• Registry Hive

• Log File

What is the most important reason that you not touch the actual original evidence any more than you have to?

• Each time you touch digital data, there is some chance of altering it.

• You might be accused of planting evidence

• You might accidentally decrypt files

The MD5 message-digest algorithm is used to _____.

• Hash a disk to verify that a disk is not altered when you examine it

• Wipe magnetic media before recycling it

• Make directories on an evidence drive

What Linux command helps you delete or remove a file?

• rm

• cd

• del

Which below is a technique for file system repair that involves recovering data from a damaged partition with limited knowledge of the file system?

• Zero-knowledge analysis

• Point-Blank analysis

• low-level analysis