WorksheetsCh 14 Digital Forensic Analysis
Total questions: 17
Worksheet time: 9mins
Name
Class
Date
1.
For forensic accountants, it is important to understand the Internet’s protocols so that they:
a)
Can write code to collect courtroom evidence.
b)
Can hire a professional to handle the problem.
c)
Understand electronic courtroom procedures.
d)
Understand the nature of a cyber attack.
2.
Datagrams are:
a)
Unchanged as they move across the Internet.
b)
Another term used to describe e-mail messages.
c)
Packets of message verification data.
d)
Packets of data.
3.
Message integrity in the OSI Model used in TCP/IP is performed by the:
a)
Data link layer.
b)
Transportation layer.
c)
Application layer.
d)
Network layer.
4.
What protocol uses “send and forget” messages over the Internet?
a)
FTC.
b)
TCP/IP.
c)
UDP.
d)
SMTP.
5.
The number of ports on a web server are:
a)
1,024.
b)
32,768.
c)
65,535.
d)
Indefinite number.
6.
The IP address is composed of a(n):
a)
8-bit address.
b)
1-bit address.
c)
32-bit address.
d)
64-bit address.
7.
A network computer’s MAC address is found in the:
a)
ARP table.
b)
URL address.
c)
Domain name system.
d)
Traceroute.
8.
TCPDUMP is a:
a)
Traceroute program.
b)
Virus program.
c)
Sniffer.
d)
Trojan horse.
9.
To trace an IP address back to its source address, which of the following tools would be best to use?
a)
Ping.
b)
Traceroute.
c)
ARIN.
d)
TCP Dump.
10.
One way to hide my e-mail address is to:
a)
Use a different PC than normally used to send my e-mail message.
b)
Use a proxy server for sending e-mail.
c)
Use a remailer.
d)
None of the above.
11.
Route control occurs in which OSI layer?
a)
Application Layer.
b)
Session Layer.
c)
Network Layer.
d)
Transportation Layer.
12.
ICMP is best described as service:
a)
For datagrams
b)
To identify and translate MAC addresses.
c)
Used for error control messages between machines.
d)
To control routing between hosts.
13.
How many packets are exchanged in the initial handshaking exchange in setting up a connection?
a)
1
b)
2
c)
3
d)
4
14.
What is the most common way financial frauds are discovered today?
a)
By auditors, preparing financial reports.
b)
By digital investigators.
c)
Tips from third parties.
d)
SEC investigations.
15.
If unauthorized spam is being sent through a company’s network, the most important job of an accountant Is to:
a)
identify who is sending the spam
b)
shut down the company’s access to the Internet to curtail financial losses
c)
determine the dollar amount of the financial loss experienced by the company
d)
call law enforcement for assistance
16.
Pretexting is:
a)
This occurs when teenagers send compromising photos of themselves to their friends
b)
This is when a cell phone user pretends to be someone else and uses a false scenario (story) to collect personal data about a person.
c)
This is a system whereby a text message is compose on one date but not sent out until a later date
d)
This is a method of saving a string of URLs while using a search engine such as Google or Bing
17.
Computers on a network have either a static or __________________IP address.
a)
latent
b)
dynamic
c)
moving
d)
network
100 %
