WGU C840 DIGITAL FORENSICS BUNDLED
EXAM COMPREHENSIVE QUESTIONS
⩥ AFF variations. Answer: Includes AFF, AFM, and AFD formats.
⩥ AFF. Answer: Stores all data and metadata in one file.
⩥ AFM. Answer: Stores data and metadata in separate files.
⩥ AFD. Answer: Stores data and metadata in multiple small files.
⩥ EnCase. Answer: Proprietary format for storing hard drive images.
⩥ EnCase hash. Answer: Ensures integrity of copied files.
⩥ Forensic Toolkit. Answer: Software for forensic analysis and data
recovery.
⩥ Ethernet cable. Answer: Used to connect to suspect machines.
,⩥ Null modem cable. Answer: Connects two computers directly for data
transfer.
⩥ EnCase cases. Answer: Organizes forensic information for
examination.
⩥ Evidence file. Answer: Contains header, checksum, and data blocks.
⩥ Checksum. Answer: Verifies data integrity during copying process.
⩥ Data blocks. Answer: Actual data copied from the suspect machine.
⩥ Forensic software. Answer: Tools used for data analysis in forensics.
⩥ Sleuth Kit. Answer: Open-source tool supporting AFF file format.
⩥ Autopsy. Answer: Forensics program that works with Sleuth Kit.
⩥ EnCase. Answer: Popular forensic tool for law enforcement
investigations.
⩥ Evidence File. Answer: Exact copy of a hard drive used for analysis.
, ⩥ MD5 Hash. Answer: Unique identifier calculated to verify data
integrity.
⩥ Forensic Toolkit (FTK). Answer: Widely used forensic analysis tool
by AccessData.
⩥ Hash Verification. Answer: Process of checking data integrity using
hash functions.
⩥ Password Cracking. Answer: Technique to access password-protected
files and documents.
⩥ Windows Registry. Answer: Database storing configuration settings
for Windows programs.
⩥ Email Timeline. Answer: Chronological arrangement of email
conversations for analysis.
⩥ Distributed Processing. Answer: Parallel analysis across multiple
computers to speed up tasks.
⩥ Explicit Image Detection. Answer: Feature identifying pornographic
images in forensic analysis.
EXAM COMPREHENSIVE QUESTIONS
⩥ AFF variations. Answer: Includes AFF, AFM, and AFD formats.
⩥ AFF. Answer: Stores all data and metadata in one file.
⩥ AFM. Answer: Stores data and metadata in separate files.
⩥ AFD. Answer: Stores data and metadata in multiple small files.
⩥ EnCase. Answer: Proprietary format for storing hard drive images.
⩥ EnCase hash. Answer: Ensures integrity of copied files.
⩥ Forensic Toolkit. Answer: Software for forensic analysis and data
recovery.
⩥ Ethernet cable. Answer: Used to connect to suspect machines.
,⩥ Null modem cable. Answer: Connects two computers directly for data
transfer.
⩥ EnCase cases. Answer: Organizes forensic information for
examination.
⩥ Evidence file. Answer: Contains header, checksum, and data blocks.
⩥ Checksum. Answer: Verifies data integrity during copying process.
⩥ Data blocks. Answer: Actual data copied from the suspect machine.
⩥ Forensic software. Answer: Tools used for data analysis in forensics.
⩥ Sleuth Kit. Answer: Open-source tool supporting AFF file format.
⩥ Autopsy. Answer: Forensics program that works with Sleuth Kit.
⩥ EnCase. Answer: Popular forensic tool for law enforcement
investigations.
⩥ Evidence File. Answer: Exact copy of a hard drive used for analysis.
, ⩥ MD5 Hash. Answer: Unique identifier calculated to verify data
integrity.
⩥ Forensic Toolkit (FTK). Answer: Widely used forensic analysis tool
by AccessData.
⩥ Hash Verification. Answer: Process of checking data integrity using
hash functions.
⩥ Password Cracking. Answer: Technique to access password-protected
files and documents.
⩥ Windows Registry. Answer: Database storing configuration settings
for Windows programs.
⩥ Email Timeline. Answer: Chronological arrangement of email
conversations for analysis.
⩥ Distributed Processing. Answer: Parallel analysis across multiple
computers to speed up tasks.
⩥ Explicit Image Detection. Answer: Feature identifying pornographic
images in forensic analysis.
