WGU D431 DIGITAL FORENSICS IN
CYBERSECURITY EXAM 2024 ACTUAL EXAM
COMPLETE 50 QUESTIONS WITH DETAILED
VERIFIED ANSWERS (100% CORRECT ANSWERS)
/ALREADY GRADED A+
Which law requires both parties to consent to the recording of a conversation? -
ANSWERECPA (Electronic Communications Privacy Act)
Which law is related to the disclosure of personally identifiable protected health
information (PHI)? - ANSWERHealth Insurance Portability and Accountability Act
(HIPAA)
Which U.S. law criminalizes the act of knowingly using a misleading domain name with
the intent to deceive a minor into viewing harmful material? - ANSWER18 U.S.C. 2252B
Which U.S. law protects journalists from turning over their work or sources to law
enforcement before the information is shared with the public? - ANSWERThe Privacy
Protection Act (PPA)
Which law or guideline lists the four states a mobile device can be in when data is
extracted from it? - ANSWERNIST SP 800-72 Guidelines
Which law includes a provision permitting the wiretapping of VoIP calls? -
ANSWERCommunications Assistance to Law Enforcement Act (CALEA)
Which policy is included in the CAN-SPAM Act? - ANSWERThe email sender must
provide some mechanism whereby the receiver can opt out of future emails and that
method cannot require the receiver to pay in order to opt out.
Which United States law requires telecommunications equipment manufacturers to
provide built-in surveillance capabilities for federal agencies? -
ANSWERCommunication Assistance to Law Enforcement Act (CALEA)
Which law requires a search warrant or one of the recognized exceptions to the search
warrant requirements for searching email messages on a computer? - ANSWERThe
Fourth Amendment to the U.S. Constitution
Where are local passwords stored for the Windows operating system? - ANSWERSAM
file in \Windows\System32\
, Where on a Windows system is the config folder located that contains the SAM file? -
ANSWERC:\Windows\System32
A forensic examiner wants to try to extract passwords for wireless networks to which a
system was connected. Where should passwords for wireless networks be stored on a
Windows XP system? - ANSWERRegistry
Which Windows password cracking tool uses rainbow tables? - ANSWEROphcrack
How does a rainbow table work to crack a password? - ANSWERIt uses a table of all
possible keyboard combinations and their hash values, then searches for a match.
What should a forensic investigator use to gather the most reliable routing information
for tracking an email message? - ANSWEREmail header
Which activity involves email tracing? - ANSWERDetermining the ownership of the
source email server
A forensic examiner reviews a laptop running OS X which has been compromised. The
examiner wants to know if there were any mounted volumes created from USB drives.
Which digital evidence should be reviewed? - ANSWER/var/log
Which log or folder contains information about printed documents on a computer
running Mac OS X? - ANSWER/var/spool/cups
Which Windows event log should be checked for evidence of invalid logon attempts? -
ANSWERSecurity
A cyber security organization has issued a warning about a cybercriminal who is using a
known vulnerability to attack unpatched corporate Macintosh systems. A network
administrator decides to examine the software updates logs on a Macintosh system to
ensure the system has been patched. Which folder contains the software updates logs?
- ANSWER/Library/Receipts
A forensic investigator wants to image an older BlackBerry smartphone running OS 7.0.
Which tool should the investigator use? - ANSWERBlackBerry Desktop Manager
An investigator wants to extract information from a mobile device by connecting it to a
computer. What should the investigator take great care to ensure? - ANSWERThat the
mobile device does not synchronize with the computer
Which state is a device in if it is powered on, performing tasks, and able to be
manipulated by the user? - ANSWERActive
CYBERSECURITY EXAM 2024 ACTUAL EXAM
COMPLETE 50 QUESTIONS WITH DETAILED
VERIFIED ANSWERS (100% CORRECT ANSWERS)
/ALREADY GRADED A+
Which law requires both parties to consent to the recording of a conversation? -
ANSWERECPA (Electronic Communications Privacy Act)
Which law is related to the disclosure of personally identifiable protected health
information (PHI)? - ANSWERHealth Insurance Portability and Accountability Act
(HIPAA)
Which U.S. law criminalizes the act of knowingly using a misleading domain name with
the intent to deceive a minor into viewing harmful material? - ANSWER18 U.S.C. 2252B
Which U.S. law protects journalists from turning over their work or sources to law
enforcement before the information is shared with the public? - ANSWERThe Privacy
Protection Act (PPA)
Which law or guideline lists the four states a mobile device can be in when data is
extracted from it? - ANSWERNIST SP 800-72 Guidelines
Which law includes a provision permitting the wiretapping of VoIP calls? -
ANSWERCommunications Assistance to Law Enforcement Act (CALEA)
Which policy is included in the CAN-SPAM Act? - ANSWERThe email sender must
provide some mechanism whereby the receiver can opt out of future emails and that
method cannot require the receiver to pay in order to opt out.
Which United States law requires telecommunications equipment manufacturers to
provide built-in surveillance capabilities for federal agencies? -
ANSWERCommunication Assistance to Law Enforcement Act (CALEA)
Which law requires a search warrant or one of the recognized exceptions to the search
warrant requirements for searching email messages on a computer? - ANSWERThe
Fourth Amendment to the U.S. Constitution
Where are local passwords stored for the Windows operating system? - ANSWERSAM
file in \Windows\System32\
, Where on a Windows system is the config folder located that contains the SAM file? -
ANSWERC:\Windows\System32
A forensic examiner wants to try to extract passwords for wireless networks to which a
system was connected. Where should passwords for wireless networks be stored on a
Windows XP system? - ANSWERRegistry
Which Windows password cracking tool uses rainbow tables? - ANSWEROphcrack
How does a rainbow table work to crack a password? - ANSWERIt uses a table of all
possible keyboard combinations and their hash values, then searches for a match.
What should a forensic investigator use to gather the most reliable routing information
for tracking an email message? - ANSWEREmail header
Which activity involves email tracing? - ANSWERDetermining the ownership of the
source email server
A forensic examiner reviews a laptop running OS X which has been compromised. The
examiner wants to know if there were any mounted volumes created from USB drives.
Which digital evidence should be reviewed? - ANSWER/var/log
Which log or folder contains information about printed documents on a computer
running Mac OS X? - ANSWER/var/spool/cups
Which Windows event log should be checked for evidence of invalid logon attempts? -
ANSWERSecurity
A cyber security organization has issued a warning about a cybercriminal who is using a
known vulnerability to attack unpatched corporate Macintosh systems. A network
administrator decides to examine the software updates logs on a Macintosh system to
ensure the system has been patched. Which folder contains the software updates logs?
- ANSWER/Library/Receipts
A forensic investigator wants to image an older BlackBerry smartphone running OS 7.0.
Which tool should the investigator use? - ANSWERBlackBerry Desktop Manager
An investigator wants to extract information from a mobile device by connecting it to a
computer. What should the investigator take great care to ensure? - ANSWERThat the
mobile device does not synchronize with the computer
Which state is a device in if it is powered on, performing tasks, and able to be
manipulated by the user? - ANSWERActive
