WGU D431 OBJECTIVE ASSESSMENT V1 AND V2 NEWEST 2026 TEST BANK| D431 DIGITAL FORENSICS IN CYBERSECURITY OA EXAM WITH COMPLETE REAL EXAM QUESTIONS AND CORRECT VERIFIED ANSWERS/ ALREADY GRADED A+ (MOST RECENT!!)

WGU D431 OBJECTIVE ASSESSMENT V1 AND V2
NEWEST 2026 TEST BANK| D431 DIGITAL FORENSICS
IN CYBERSECURITY OA EXAM WITH COMPLETE
REAL EXAM QUESTIONS AND CORRECT VERIFIED
ANSWERS/ ALREADY GRADED A+ (MOST RECENT!!)


D431 OBJECTIVE ASSESSMENT V1.
Which law or guideline lists the four states a mobile device can be in
when data is extracted from it?
A. NIST SP 800-72 Guidelines
B. The USA Patriot Act
C. NIST SP 101r1 Guidelines
D. The Electronic Communications Privacy Act (ECPA) - Correct
Answer - NIST SP 800-72 Guidelines


Which United States law requires telecommunications equipment
manufacturers to provide built-in surveillance capabilities for federal
agencies?
A. Electronic Communication Privacy Act (ECPA)
B. Communication Assistance to Law Enforcement Act (CALEA)
C. Foreign Intelligence Surveillance Act (FISA)
D. USA Patriot Act - Correct Answer - Communication Assistance to
Law Enforcement Act (CALEA)




pg. 1

,Which law requires a search warrant or one of the recognized exceptions
to the search warrant requirements for searching email messages on a
computer?
A. The CAN-SPAM Act
B. The Fourth Amendment to the U.S. Constitution
C. USC 2252B
D. The Communication Assistance to Law Enforcement Act - Correct
Answer - The Fourth Amendment to the U.S. Constitution


Which type of storage format should be transported in a special bag to
reduce electrostatic interference?
A. Solid-state drives
B. Optical media
C. Digital audio tapes
D. Magnetic media - Correct Answer - A. Solid-state drives


Which Windows component is responsible for reading the boot.ini file
and displaying the boot loader menu on Windows XP during the boot
process?
A. NTLDR
B. NTOSKRNL
C. Windows Registry
D. Win32 subsystem - Correct Answer - A. NTLDR



pg. 2

,The following line of code is an example of how to make a forensic
copy of a suspect drive:
dd if=/dev/mem of=/evidence/image.memory1
Which operating system should be used to run this command?
A. Windows
B. Chrome
C. BlackBerry
D. Linux - Correct Answer - D. Linux


A forensic examiner wants to try to extract passwords for wireless
networks to which a system was connected. Where should passwords for
wireless networks be stored on a Windows XP system?
A. BIOS
B. Registry
C. Program Files
D. Bash - Correct Answer - Registry


A forensic examiner reviews a laptop running OS X which has been
compromised. The examiner wants to know if there were any mounted
volumes created from USB drives. Which digital evidence should be
reviewed?
A. /var/log
B. /var/vm
C. /Users/<user>/.bash_history

pg. 3

, D. /Users/<user>/Library/Preferences - Correct Answer - /var/log


Which log or folder contains information about printed documents on a
computer running Mac OS X?
A. /var/spool/cups
B. /var/log
C. /var/vm
D. /var/log/lpr.log - Correct Answer - /var/spool/cups


A cyber security organization has issued a warning about a
cybercriminal who is using a known vulnerability to attack unpatched
corporate Macintosh systems. A network administrator decides to
examine the software updates logs on a Macintosh system to ensure the
system has been patched. Which folder contains the software updates
logs?
A. /Library/Receipts
B. /var/spool/cups
C. /proc
D. /var/log - Correct Answer - /Library/Receipts


A forensic investigator wants to image an older BlackBerry smartphone
running OS 7.0. Which tool should the investigator use?
A. BlackBerry Desktop Manager
B. BlackBerry Extractor


pg. 4