WGU C840 OA DIGITAL FORENSICS ACTUAL
QUESTIONS WITH VERIFIED SOLUTION
◉ Which method of copying digital evidence ensures proper
evidence collection?
A Make the copy using file transfer
B Copy files using drag and drop
C Make the copy at the bit-level
D Copy the logical partitions.
Answer: C
◉ A computer involved in a crime is infected with malware. The
computer is on and connected to the company's network. The
forensic investigator arrives at the scene.
Which action should be the investigator's first step?
A Remove the malware and secure the computer.
B Unplug the computer's power cord.
C Unplug the computer's Ethernet cable.
D Label all the attachments and secure the computer..
,Answer: C
◉ What are the three basic tasks that a systems forensic specialist
must keep in mind when handling evidence during a cybercrime
investigation?
Answer options may be used more than once or not at all. Select
your answers from the pull-down list.
1 Preserve evidence
2 Catalog evidence
3 Prepare evidence
4 Make multiple copies of evidence
5 Disseminate evidence
6 Prepare evidence report
7 Find evidence
A 1,3,7
B 2,3,7.
Answer: A
,◉ How do forensic specialists show that digital evidence was
handled in a protected, secure manner during the process of
collecting and analyzing the evidence?
A Forensic lab logbooks
B Forensic software logs
C Chain of custody
D Chain of email messages.
Answer: C
◉ Which characteristic applies to magnetic drives compared to
solid-state drives (SSDs)?
A Lower capacity
B Better durability
C Lower power consumption
D Lower cost.
Answer: D
◉ Which characteristic applies to solid-state drives (SSDs)
compared to magnetic drives?
A They have slower start-up times.
, B They cost less.
C They are less susceptible to damage.
D They use more power..
Answer: C
◉ Which type of storage format should be transported in a special
bag to reduce electrostatic interference?
A Solid-state drives
B Magnetic media
C Digital audio tapes
D Optical media.
Answer: B
◉ Which Windows component is responsible for reading the
boot.ini file and displaying the boot loader menu on Windows XP
during the boot process?
A Win32 subsystem
B NTLDR
C NTOSKRNL
D Windows Registry.
QUESTIONS WITH VERIFIED SOLUTION
◉ Which method of copying digital evidence ensures proper
evidence collection?
A Make the copy using file transfer
B Copy files using drag and drop
C Make the copy at the bit-level
D Copy the logical partitions.
Answer: C
◉ A computer involved in a crime is infected with malware. The
computer is on and connected to the company's network. The
forensic investigator arrives at the scene.
Which action should be the investigator's first step?
A Remove the malware and secure the computer.
B Unplug the computer's power cord.
C Unplug the computer's Ethernet cable.
D Label all the attachments and secure the computer..
,Answer: C
◉ What are the three basic tasks that a systems forensic specialist
must keep in mind when handling evidence during a cybercrime
investigation?
Answer options may be used more than once or not at all. Select
your answers from the pull-down list.
1 Preserve evidence
2 Catalog evidence
3 Prepare evidence
4 Make multiple copies of evidence
5 Disseminate evidence
6 Prepare evidence report
7 Find evidence
A 1,3,7
B 2,3,7.
Answer: A
,◉ How do forensic specialists show that digital evidence was
handled in a protected, secure manner during the process of
collecting and analyzing the evidence?
A Forensic lab logbooks
B Forensic software logs
C Chain of custody
D Chain of email messages.
Answer: C
◉ Which characteristic applies to magnetic drives compared to
solid-state drives (SSDs)?
A Lower capacity
B Better durability
C Lower power consumption
D Lower cost.
Answer: D
◉ Which characteristic applies to solid-state drives (SSDs)
compared to magnetic drives?
A They have slower start-up times.
, B They cost less.
C They are less susceptible to damage.
D They use more power..
Answer: C
◉ Which type of storage format should be transported in a special
bag to reduce electrostatic interference?
A Solid-state drives
B Magnetic media
C Digital audio tapes
D Optical media.
Answer: B
◉ Which Windows component is responsible for reading the
boot.ini file and displaying the boot loader menu on Windows XP
during the boot process?
A Win32 subsystem
B NTLDR
C NTOSKRNL
D Windows Registry.
