WGU D431 DIGITAL FORENSICS IN
CYBERSECURITY TASK 2 EXAM STUDY
GUIDE 2026 COMPREHENSIVE QUESTIONS
AND ANSWERS
⫸ What uses AFF file format? Answer: Autopsy and Sleuth Kit
⫸ Data Doctor Answer: Recovers all inbox and outbox data and
contacts data
⫸ Linux Printer log location Answer: /var/log/lpr
⫸ How does windows store passwords? Answer: SAM File
⫸ Where does windows store passwords? Answer: Windows\System32
⫸ Does windows encrypt or hash the passwords? Answer: hash
⫸ Where do deleted windows files go? Answer: Deleted from MFT or
FAT
⫸ Where do deleted MAC files go? Answer: Hidden folder /.Trash
, ⫸ What file holds browser information after it's been deleted? Answer:
index.dat
⫸ Where do ipad/iphone deleted files go? Answer: /.Trashes/501
⫸ Slack space Answer: space between end of the file and the end of the
cluster
⫸ Pwnage Answer: unlock ipad touch
⫸ APowerSoft and iMyPhone Answer: recover deleted files from
iphone
⫸ Which type of data are the authorities allowed to get from service
providers? Answer: Basic subscriber information, Transactional
information, Content information, real-time access
⫸ The Wireless Communications and Public Safety Act of 1999
Answer: Law to collect GPS location
⫸ The Communication Assistance to Law Enforcement Act (CALEA)
Answer: Requires that telecommunications carriers and manufacturers of
telecommunications equipment modify and design their equipment,
facilities, and services to ensure that they have built-in surveillance
capabilities, allowing federal agencies to monitor all telephone,
broadband internet, and VoIP traffic in real time.
CYBERSECURITY TASK 2 EXAM STUDY
GUIDE 2026 COMPREHENSIVE QUESTIONS
AND ANSWERS
⫸ What uses AFF file format? Answer: Autopsy and Sleuth Kit
⫸ Data Doctor Answer: Recovers all inbox and outbox data and
contacts data
⫸ Linux Printer log location Answer: /var/log/lpr
⫸ How does windows store passwords? Answer: SAM File
⫸ Where does windows store passwords? Answer: Windows\System32
⫸ Does windows encrypt or hash the passwords? Answer: hash
⫸ Where do deleted windows files go? Answer: Deleted from MFT or
FAT
⫸ Where do deleted MAC files go? Answer: Hidden folder /.Trash
, ⫸ What file holds browser information after it's been deleted? Answer:
index.dat
⫸ Where do ipad/iphone deleted files go? Answer: /.Trashes/501
⫸ Slack space Answer: space between end of the file and the end of the
cluster
⫸ Pwnage Answer: unlock ipad touch
⫸ APowerSoft and iMyPhone Answer: recover deleted files from
iphone
⫸ Which type of data are the authorities allowed to get from service
providers? Answer: Basic subscriber information, Transactional
information, Content information, real-time access
⫸ The Wireless Communications and Public Safety Act of 1999
Answer: Law to collect GPS location
⫸ The Communication Assistance to Law Enforcement Act (CALEA)
Answer: Requires that telecommunications carriers and manufacturers of
telecommunications equipment modify and design their equipment,
facilities, and services to ensure that they have built-in surveillance
capabilities, allowing federal agencies to monitor all telephone,
broadband internet, and VoIP traffic in real time.
