OBJECTIVE ASSESSMENT EXAM 300 ACTUAL
QUESTIONS AND CORRECT ANSWERS WITH
RATIONALE LATEST UPDATE ALREADY GRADED A+
The WGU D431 Digital Forensics in Cybersecurity Objective Assessment
evaluates comprehensive knowledge of forensic principles, evidence handling,
legal frameworks, and technical analysis. The exam covers legal considerations
including the Fourth Amendment, ECPA, CALEA, HIPAA, and chain of custody
requirements. Candidates demonstrate competency in forensic imaging, file system
analysis, steganography detection, malware analysis, network forensics, and
mobile device acquisition. The test emphasizes proper evidence collection, data
recovery from unallocated space, Windows and Linux artifacts, and incident
response procedures. Success requires understanding encryption, anti-forensics,
cloud forensics, and emerging technologies while maintaining evidence integrity
and following established forensic protocols.
Section 1: Legal Frameworks, Ethics, and Policy (Questions 1-50)
Question 1
Which U.S. law requires both parties to consent to the recording of a conversation?
A) Health Insurance Portability and Accountability Act (HIPAA)
B) Communications Assistance to Law Enforcement Act (CALEA)
C) Electronic Communications Privacy Act (ECPA)
D) Privacy Protection Act (PPA)
Answer: C) Electronic Communications Privacy Act (ECPA)
Rationale: The Electronic Communications Privacy Act (ECPA) governs the
interception and privacy of electronic communications, including requirements for
consent to recording conversations .
Question 2
,Which U.S. law is related to the disclosure of personally identifiable protected
health information (PHI)?
A) Electronic Communications Privacy Act (ECPA)
B) Health Insurance Portability and Accountability Act (HIPAA)
C) CAN-SPAM Act
D) Privacy Protection Act (PPA)
Answer: B) Health Insurance Portability and Accountability Act (HIPAA)
Rationale: HIPAA governs the protection and disclosure of protected health
information (PHI), which is critical when health information appears in digital
evidence .
Question 3
Which U.S. law criminalizes the act of knowingly using a misleading domain
name with the intent to deceive a minor into viewing harmful material?
A) Communications Assistance to Law Enforcement Act (CALEA)
B) Privacy Protection Act (PPA)
C) Electronic Communications Privacy Act (ECPA)
D) 18 U.S.C. 2252B
Answer: D) 18 U.S.C. 2252B
Rationale: Title 18 U.S.C. § 2252B specifically addresses the criminal offense of
using misleading domain names with the intent to deceive minors into accessing
harmful material .
Question 4
Which U.S. law protects journalists from turning over their work or sources to law
enforcement before the information is shared with the public?
A) Electronic Communications Privacy Act (ECPA)
B) Health Insurance Portability and Accountability Act (HIPAA)
C) Communications Assistance to Law Enforcement Act (CALEA)
D) Privacy Protection Act (PPA)
Answer: D) Privacy Protection Act (PPA)
Rationale: The Privacy Protection Act protects journalists from having to turn over
work product or sources to law enforcement before publication .
,Question 5
Which law includes a provision permitting the wiretapping of VoIP calls?
A) Electronic Communications Privacy Act (ECPA)
B) Health Insurance Portability and Accountability Act (HIPAA)
C) Communications Assistance to Law Enforcement Act (CALEA)
D) Stored Communications Act
Answer: C) Communications Assistance to Law Enforcement Act (CALEA)
Rationale: CALEA mandates telecommunications carriers to assist law
enforcement in executing authorized wiretaps, including on Voice over IP (VoIP)
calls .
Question 6
Which U.S. law requires telecommunications equipment manufacturers to provide
built-in surveillance capabilities for federal agencies?
A) Electronic Communications Privacy Act (ECPA)
B) Communications Assistance to Law Enforcement Act (CALEA)
C) Privacy Protection Act (PPA)
D) Health Insurance Portability and Accountability Act (HIPAA)
Answer: B) Communications Assistance to Law Enforcement Act (CALEA)
Rationale: CALEA requires telecommunications equipment manufacturers to
design systems capable of allowing federal law enforcement to conduct authorized
electronic surveillance .
Question 7
Which policy is included in the CAN-SPAM Act?
A) All marketing emails must be encrypted
B) The email sender must provide some mechanism whereby the recipient can opt
out of future emails
C) Senders must include their physical address
D) Both B and C
Answer: D) Both B and C
Rationale: The CAN-SPAM Act requires commercial email senders to include opt-
out mechanisms and a physical address in their emails.
, Question 8
Which law requires a search warrant or one of the recognized exceptions to the
search warrant requirements for searching email messages on a computer?
A) The CAN-SPAM Act
B) The Fourth Amendment to the U.S. Constitution
C) USC 2252B
D) The Communication Assistance to Law Enforcement Act
Answer: B) The Fourth Amendment to the U.S. Constitution
Rationale: The Fourth Amendment protects against unreasonable searches and
seizures, requiring a search warrant for searching email messages on a computer .
Question 9
What is the primary purpose of the Health Insurance Portability and Accountability
Act (HIPAA) in digital forensics?
A) To regulate email marketing
B) To protect the privacy of patient health information
C) To require surveillance capabilities
D) To criminalize domain name misuse
Answer: B) To protect the privacy of patient health information
Rationale: HIPAA's primary purpose in digital forensics is protecting personally
identifiable protected health information (PHI) from unauthorized disclosure .
Question 10
The Sarbanes-Oxley Act (SOX) requires:
A) Companies to reduce their tax liability
B) Senior executives to personally sign financial reports
C) The use of international accounting standards
D) Companies to use cash-basis accounting
Answer: B) Senior executives to personally sign financial reports
Rationale: SOX requires senior executives to personally certify the accuracy and
completeness of financial reports, increasing accountability for financial reporting.
Question 11