C840 Digital Forensics in Cybersecurity Pre-Assessment
Questions and Answers Latest Update 2027
Question 1.
The chief information officer of an accounting firm believes sensitive data is being exposed
on the local network. Which tool should the IT staff use to gather digital evidence about
this security vulnerability?
Correct Answer: Sniffer
Question 2.
A police detective investigating a threat traces the source to a house. The couple at the
house shows the detective the only computer the family owns, which is in their son's
bedroom. The couple states that their son is presently in class at a local middle school.
How should the detective legally gain access to the computer?
Correct Answer: Obtain consent to search from the parents
Question 3.
How should a forensic scientist obtain the network configuration from a Windows PC before
seizing it from a crime scene?
Correct Answer: By using the ipconfig command from a command prompt on the
computer
Question 4.
The human resources manager of a small accounting firm believes he may have been a
victim of a phishing scam. The manager clicked on a link in an email message that asked
him to verify the logon credentials for the firm's online bank account. Which digital
evidence should a forensic investigator collect to investigate this incident?
Correct Answer: Browser cache
Question 5.
After a company's single-purpose, dedicated messaging server is hacked by a
cybercriminal, a forensics expert is hired to investigate the crime and collect evidence.
Which digital evidence should be collected?
Correct Answer: Firewall logs
, Question 6.
Thomas received an email stating that he needed to follow a link and verify his bank
account information to ensure it was secure. Shortly after following the instructions,
Thomas noticed money was missing from his account. Which digital evidence should be
considered to determine how Thomas' account information was compromised?
Correct Answer: Email messages
Question 7.
The chief executive officer (CEO) of a small computer company has identified a potential
hacking attack from an outside competitor. Which type of evidence should a forensics
investigator use to identify the source of the hack?
Correct Answer: Network transaction logs
Question 8.
A forensic scientist arrives at a crime scene to begin collecting evidence. What is the first
thing the forensic scientist should do?
Correct Answer: Photograph all evidence in its original place
Question 9.
Which method of copying digital evidence ensures proper evidence collection?
Correct Answer: Make the copy at the bit-level
Question 10.
A computer involved in a crime is infected with malware. The computer is on and
connected to the company's network. The forensic investigator arrives at the scene. Which
action should be the investigator's first step?
Correct Answer: Unplug the computer's Ethernet cable
Question 11.
What are the three basic tasks that a systems forensic specialist must keep in mind when
handling evidence during a cybercrime investigation?
Correct Answer: Find evidence, Preserve evidence, and Prepare evidence
Question 12.
How do forensic specialists show that digital evidence was handled in a protected, secure
manner during the process of collecting and analyzing the evidence?
Correct Answer: Chain of custody
Questions and Answers Latest Update 2027
Question 1.
The chief information officer of an accounting firm believes sensitive data is being exposed
on the local network. Which tool should the IT staff use to gather digital evidence about
this security vulnerability?
Correct Answer: Sniffer
Question 2.
A police detective investigating a threat traces the source to a house. The couple at the
house shows the detective the only computer the family owns, which is in their son's
bedroom. The couple states that their son is presently in class at a local middle school.
How should the detective legally gain access to the computer?
Correct Answer: Obtain consent to search from the parents
Question 3.
How should a forensic scientist obtain the network configuration from a Windows PC before
seizing it from a crime scene?
Correct Answer: By using the ipconfig command from a command prompt on the
computer
Question 4.
The human resources manager of a small accounting firm believes he may have been a
victim of a phishing scam. The manager clicked on a link in an email message that asked
him to verify the logon credentials for the firm's online bank account. Which digital
evidence should a forensic investigator collect to investigate this incident?
Correct Answer: Browser cache
Question 5.
After a company's single-purpose, dedicated messaging server is hacked by a
cybercriminal, a forensics expert is hired to investigate the crime and collect evidence.
Which digital evidence should be collected?
Correct Answer: Firewall logs
, Question 6.
Thomas received an email stating that he needed to follow a link and verify his bank
account information to ensure it was secure. Shortly after following the instructions,
Thomas noticed money was missing from his account. Which digital evidence should be
considered to determine how Thomas' account information was compromised?
Correct Answer: Email messages
Question 7.
The chief executive officer (CEO) of a small computer company has identified a potential
hacking attack from an outside competitor. Which type of evidence should a forensics
investigator use to identify the source of the hack?
Correct Answer: Network transaction logs
Question 8.
A forensic scientist arrives at a crime scene to begin collecting evidence. What is the first
thing the forensic scientist should do?
Correct Answer: Photograph all evidence in its original place
Question 9.
Which method of copying digital evidence ensures proper evidence collection?
Correct Answer: Make the copy at the bit-level
Question 10.
A computer involved in a crime is infected with malware. The computer is on and
connected to the company's network. The forensic investigator arrives at the scene. Which
action should be the investigator's first step?
Correct Answer: Unplug the computer's Ethernet cable
Question 11.
What are the three basic tasks that a systems forensic specialist must keep in mind when
handling evidence during a cybercrime investigation?
Correct Answer: Find evidence, Preserve evidence, and Prepare evidence
Question 12.
How do forensic specialists show that digital evidence was handled in a protected, secure
manner during the process of collecting and analyzing the evidence?
Correct Answer: Chain of custody
