WGU C840 - DIGITAL FORENSICS EXAM QUESTIONS AND ANSWERS
The most common computer hard drives today are
__________. - correct answer SATA
A __________ is used to send a test packet, or echo
packet, to a machine to determine if the machine is
reachable and how long the packet takes to reach the
machine. - correct answer ping
Suspects often overwhelm forensic analysts with false
positives and false leads. This is referred to
as__________. - correct answer data fabrication
,WGU C840
Which of the following is the definition of the Daubert
Standard? - correct answer The Daubert Standard dictates that
only methods and tools widely accepted in the scientific
community can be used in court.
The __________ protects journalists from being required
to turn over to law enforcement any work product and
documentary material, including sources, before it is
disseminated to the public. - correct answer Privacy Protection
Act of 1980
It has been claimed that __________ of all computers
connected to the Internet have spyware. - correct answer 80%
__________ is/are the cyber-equivalent of vandalism. -
correct answer DoS attacks
Which of the following is the definition of logic bomb? -
correct answer malware that executes damage when a specific
condition is met
, WGU C840
Rules of evidence can be defined as __________. - correct
answer rules that govern whether, when, how, and why
proof of a legal case can be placed before a judge or jury
Use of __________ tools enables an investigator to
reconstruct file fragments if files have been deleted or
overwritten. - correct answer bit-level
Identification, preservation, collection, examination,
analysis, and presentation are six classes in the matrix of
__________. - correct answer the DFRWS framework
What is meant by file slack? - correct answer the unused space
between the logical end of file and the physical end of file
Information that has been processed and assembled so
that it is relevant to an investigation and supports a
specific finding or determination is the definition of
__________. - correct answer digital evidence