WGU C840 DIGITAL FORENSICS
COMPREHENSIVE EXAM STUDY GUIDE
WITH COMPLETE SOLUTIONS
●● A police detective investigating a threat traces the source to a house.
The couple at the house shows the detective the only computer the
family owns, which is in their son's bedroom. The couple states that their
son is presently in class at a local middle school.
How should the detective legally gain access to the computer?
Answer: Obtain consent to search from the parents
●● How should a forensic scientist obtain the network configuration
from a Windows PC before seizing it from a crime scene?
Answer: By using the ipconfig command from a command prompt on
the computer
●● The human resources manager of a small accounting firm believes he
may have been a victim of a phishing scam. The manager clicked on a
link in an email message that asked him to verify the logon credentials
for the firm's online bank account.
Which digital evidence should a forensic investigator collect to
investigate this incident?
, Answer: Browser cache
●● After a company's single-purpose, dedicated messaging server is
hacked by a cybercriminal, a forensics expert is hired to investigate the
crime and collect evidence.
Which digital evidence should be collected?
Answer: Firewall logs
●● Thomas received an email stating that he needed to follow a link and
verify his bank account information to ensure it was secure. Shortly after
following the instructions, Thomas noticed money was missing from his
account.
Which digital evidence should be considered to determine how Thomas'
account information was compromised?
Answer: Email messages
●● The chief executive officer (CEO) of a small computer company has
identified a potential hacking attack from an outside competitor.
Which type of evidence should a forensics investigator use to identify
the source of the hack?
Answer: Network transaction logs
COMPREHENSIVE EXAM STUDY GUIDE
WITH COMPLETE SOLUTIONS
●● A police detective investigating a threat traces the source to a house.
The couple at the house shows the detective the only computer the
family owns, which is in their son's bedroom. The couple states that their
son is presently in class at a local middle school.
How should the detective legally gain access to the computer?
Answer: Obtain consent to search from the parents
●● How should a forensic scientist obtain the network configuration
from a Windows PC before seizing it from a crime scene?
Answer: By using the ipconfig command from a command prompt on
the computer
●● The human resources manager of a small accounting firm believes he
may have been a victim of a phishing scam. The manager clicked on a
link in an email message that asked him to verify the logon credentials
for the firm's online bank account.
Which digital evidence should a forensic investigator collect to
investigate this incident?
, Answer: Browser cache
●● After a company's single-purpose, dedicated messaging server is
hacked by a cybercriminal, a forensics expert is hired to investigate the
crime and collect evidence.
Which digital evidence should be collected?
Answer: Firewall logs
●● Thomas received an email stating that he needed to follow a link and
verify his bank account information to ensure it was secure. Shortly after
following the instructions, Thomas noticed money was missing from his
account.
Which digital evidence should be considered to determine how Thomas'
account information was compromised?
Answer: Email messages
●● The chief executive officer (CEO) of a small computer company has
identified a potential hacking attack from an outside competitor.
Which type of evidence should a forensics investigator use to identify
the source of the hack?
Answer: Network transaction logs
