NWIT 263 Midterm Exam With Complete Solutions
why must digital forensics labs be physically secure? - ANSWER - so that evidence is
not destroyed
- so that evidence is not corrupted
- so that the evidence is not lost
both public and private sector investigations require search warrants - ANSWER false
how do Microsoft OSs allocate disk space for files? - ANSWER by clusters
what is the biggest challenge when trying to acquire an image from a MAC? - ANSWER
physically accessing the drive
which of the following technologies is used to validate digital evidence? - ANSWER
hashing
where would one find lists of known files hashes for a variety of operating systems,
applications and images? - ANSWER the National Software Reference Library (NSRL)
which is the default file system for today's Linux distributions? - ANSWER ext4
which types of graphics files do digital forensics investigate most? - ANSWER - images
downloaded from the web
- images circulated via email
every Windows file system supports alternate data streams - ANSWER false
why must digital forensics labs be physically secure? - ANSWER - so that evidence is
not destroyed
- so that evidence is not corrupted
- so that the evidence is not lost
both public and private sector investigations require search warrants - ANSWER false
how do Microsoft OSs allocate disk space for files? - ANSWER by clusters
what is the biggest challenge when trying to acquire an image from a MAC? - ANSWER
physically accessing the drive
which of the following technologies is used to validate digital evidence? - ANSWER
hashing
where would one find lists of known files hashes for a variety of operating systems,
applications and images? - ANSWER the National Software Reference Library (NSRL)
which is the default file system for today's Linux distributions? - ANSWER ext4
which types of graphics files do digital forensics investigate most? - ANSWER - images
downloaded from the web
- images circulated via email
every Windows file system supports alternate data streams - ANSWER false
