WGU C702 FORENSICS AND NETWORK
INTRUSION OBJECTIVE ASSESSMENT
ACTUAL EXAM 2025/2026 QUESTIONS
WITH VERIFIED CORRECT SOLUTIONS ||
100% GUARANTEED PASS
<BRAND NEW VERSION>
1. Computer Forensics - ANSWER ✓ A set of methodological procedures and
techniques that help identify, gather, preserve, extract, interpret, document,
and present evidence from computers in a way that is legally admissible
2. Cyber Crime - ANSWER ✓ Any illegal act involving a computing device,
network, its systems, or its applications. Both internal and external
3. Enterprise Theory of Investigation (ETI) - ANSWER ✓ Methodology for
investigating criminal activity
4. Types of Cyber Crime - ANSWER ✓ Civil, Criminal, Administrative
5. Civil Cases - ANSWER ✓ Involve disputes between two parties. Brought
for violation of contracts and lawsuits where a guilty outcome generally
results in monetary damages to the plaintiff
6. Criminal Cases - ANSWER ✓ Brought by law enforcement agencies in
response to a suspected violation of law where a guilty outcome results in
monetary damages, imprisonment, or both
7. Administrative Cases - ANSWER ✓ An internal investigation by an
organization to discover if its employees/clients/partners are abiding by the
, rules or policies (Violation of company policies). Non-criminal in nature and
are related to misconduct or activities of an employee
8. Rules of Forensic Investigation - ANSWER ✓ Safeguard the integrity of the
evidence and render it acceptable in a court of law. The forensic examiner
must make duplicate copies of the original evidence. The duplicate copies
must be accurate replications of the originals, and the forensic examiner
must also authenticate the duplicate copies to avoid questions about the
integrity of the evidence. Must not continue with the investigation if the
examination is going to be beyond his or her knowledge level or skill level.
9. Forensic Readiness - ANSWER ✓ An organization's ability to make optimal
use of digital evidence in a limited period and with minimal investigation
costs.
10.Fourth Amendment - ANSWER ✓ Protects against unreasonable search and
seizure. Government agents may not search or seize areas or things in which
a person has reasonable expectation of privacy, without a search warrant.
11.Scientific Working Group on Digital Evidence (SWGDE) - ANSWER ✓
brings together organizations actively engaged in the field of digital and
multimedia evidence to foster communication and cooperation as well as to
ensure quality and consistency within the forensic community.
12.Computer Forensics Investigation Process - ANSWER ✓ 1. Pre-
Investigation
2. Investigation
3. Post-Investigation
13.Pre-Investigation - ANSWER ✓ Tasks performed prior to investigation
Setting up a computer forensics lab, toolkit, and workstation
14.Investiagtion - ANSWER ✓ Main phase in computer forensics investigation
Acquisition, preservation, and analysis of the data
15.Post-Investigation - ANSWER ✓ Reporting and documentation of all the
actions undertaken and the findings
Ensure that the target audience can easily understand the report
, Ensure report provides adequate and acceptable evidence
16.Computer Forensics Laboratory - ANSWER ✓ Work area considerations
(50-63 sq. ft per station) no windows
ASCLD/Lab Accreditation
ISO/IEC 17025
17.Forensic Hardware Tools - ANSWER ✓ FRED, Paraben's StrongHold, PC-
3000 Data Extractor, Paraben's Chat Stick, RAPID IMAGE 7020 X2,
RoadMASSter-3 X2, ZX-Tower, Data Recovery Stick, Tableau T8-R2
Forensic USB Bridge
18.FRED - ANSWER ✓ Acquires data directly from hard drives and storage
devices
19.Paraben's StrongHold - ANSWER ✓ blocks out wireless signals
20.PC-3000 Data Extractor - ANSWER ✓ Diagnoses and fixes file system
issues, so data can be obtained
21.A network log from a remote system is entered into evidence, and the proper
steps are taken to protect the integrity of the data. The log contains network
intrusion data but does not contain any information about the log.
22.What must an investigator document about this log in the forensic report? -
ANSWER ✓ Name of the server
23.What is the minimum number of workstations a forensics lab needs? -
ANSWER ✓ Two
24.A forensic investigator is investigating an attack on a WordPress database.
The investigator has already made a backup of the database from the
MySQL server and needs to restore the data on the forensic investigator's
laptop. Which command creates a database named wordpress? - ANSWER
✓ Create database wordpress;
25.Which utility should be used to acquire Mozilla Thunderbird data? -
ANSWER ✓ SysTools MailPro+
, 26.Which command should a forensic investigator use to extract the device
activity from an Amazon Alexa while using the investigator's laptop? -
ANSWER ✓ adb pull
27.Where should a forensic investigator look for the Integrated Circuit Card ID
(ICCID) when collecting cellular evidence? - ANSWER ✓ Mobile phone
device
28.How should a forensic investigator preserve evidence on a cell phone during
transport without altering any digital evidence? - ANSWER ✓ Place the
device in a Faraday bag
29.What allows for a lawful search to be conducted without a warrant or
probable cause? - ANSWER ✓ Consent of person with authority
30.A forensic investigator is tasked with retrieving evidence where the primary
server has been erased. The investigator needs to rely on network logs and
backup tapes to base their conclusions on while testifying in court. Which
information found in rules of evidence, Rule 1001, helps determine if this
testimony is acceptable to the court? - ANSWER ✓ Definition of original
evidence
31.When can a forensic investigator collect evidence without formal consent? -
ANSWER ✓ When properly worded banners are displayed on the computer
screen
32.Who determines whether a forensic investigation should take place if a
situation is undocumented in the standard operating procedures? - ANSWER
✓ Decision maker
33.Which web application weakness allows sensitive data to be unintentionally
revealed to an unauthorized user? - ANSWER ✓ Information leakage
34.What is the focus of the enterprise theory of investigation (ETI)? -
ANSWER ✓ Solving one crime can tie it back to a criminal organization's
activities.
INTRUSION OBJECTIVE ASSESSMENT
ACTUAL EXAM 2025/2026 QUESTIONS
WITH VERIFIED CORRECT SOLUTIONS ||
100% GUARANTEED PASS
<BRAND NEW VERSION>
1. Computer Forensics - ANSWER ✓ A set of methodological procedures and
techniques that help identify, gather, preserve, extract, interpret, document,
and present evidence from computers in a way that is legally admissible
2. Cyber Crime - ANSWER ✓ Any illegal act involving a computing device,
network, its systems, or its applications. Both internal and external
3. Enterprise Theory of Investigation (ETI) - ANSWER ✓ Methodology for
investigating criminal activity
4. Types of Cyber Crime - ANSWER ✓ Civil, Criminal, Administrative
5. Civil Cases - ANSWER ✓ Involve disputes between two parties. Brought
for violation of contracts and lawsuits where a guilty outcome generally
results in monetary damages to the plaintiff
6. Criminal Cases - ANSWER ✓ Brought by law enforcement agencies in
response to a suspected violation of law where a guilty outcome results in
monetary damages, imprisonment, or both
7. Administrative Cases - ANSWER ✓ An internal investigation by an
organization to discover if its employees/clients/partners are abiding by the
, rules or policies (Violation of company policies). Non-criminal in nature and
are related to misconduct or activities of an employee
8. Rules of Forensic Investigation - ANSWER ✓ Safeguard the integrity of the
evidence and render it acceptable in a court of law. The forensic examiner
must make duplicate copies of the original evidence. The duplicate copies
must be accurate replications of the originals, and the forensic examiner
must also authenticate the duplicate copies to avoid questions about the
integrity of the evidence. Must not continue with the investigation if the
examination is going to be beyond his or her knowledge level or skill level.
9. Forensic Readiness - ANSWER ✓ An organization's ability to make optimal
use of digital evidence in a limited period and with minimal investigation
costs.
10.Fourth Amendment - ANSWER ✓ Protects against unreasonable search and
seizure. Government agents may not search or seize areas or things in which
a person has reasonable expectation of privacy, without a search warrant.
11.Scientific Working Group on Digital Evidence (SWGDE) - ANSWER ✓
brings together organizations actively engaged in the field of digital and
multimedia evidence to foster communication and cooperation as well as to
ensure quality and consistency within the forensic community.
12.Computer Forensics Investigation Process - ANSWER ✓ 1. Pre-
Investigation
2. Investigation
3. Post-Investigation
13.Pre-Investigation - ANSWER ✓ Tasks performed prior to investigation
Setting up a computer forensics lab, toolkit, and workstation
14.Investiagtion - ANSWER ✓ Main phase in computer forensics investigation
Acquisition, preservation, and analysis of the data
15.Post-Investigation - ANSWER ✓ Reporting and documentation of all the
actions undertaken and the findings
Ensure that the target audience can easily understand the report
, Ensure report provides adequate and acceptable evidence
16.Computer Forensics Laboratory - ANSWER ✓ Work area considerations
(50-63 sq. ft per station) no windows
ASCLD/Lab Accreditation
ISO/IEC 17025
17.Forensic Hardware Tools - ANSWER ✓ FRED, Paraben's StrongHold, PC-
3000 Data Extractor, Paraben's Chat Stick, RAPID IMAGE 7020 X2,
RoadMASSter-3 X2, ZX-Tower, Data Recovery Stick, Tableau T8-R2
Forensic USB Bridge
18.FRED - ANSWER ✓ Acquires data directly from hard drives and storage
devices
19.Paraben's StrongHold - ANSWER ✓ blocks out wireless signals
20.PC-3000 Data Extractor - ANSWER ✓ Diagnoses and fixes file system
issues, so data can be obtained
21.A network log from a remote system is entered into evidence, and the proper
steps are taken to protect the integrity of the data. The log contains network
intrusion data but does not contain any information about the log.
22.What must an investigator document about this log in the forensic report? -
ANSWER ✓ Name of the server
23.What is the minimum number of workstations a forensics lab needs? -
ANSWER ✓ Two
24.A forensic investigator is investigating an attack on a WordPress database.
The investigator has already made a backup of the database from the
MySQL server and needs to restore the data on the forensic investigator's
laptop. Which command creates a database named wordpress? - ANSWER
✓ Create database wordpress;
25.Which utility should be used to acquire Mozilla Thunderbird data? -
ANSWER ✓ SysTools MailPro+
, 26.Which command should a forensic investigator use to extract the device
activity from an Amazon Alexa while using the investigator's laptop? -
ANSWER ✓ adb pull
27.Where should a forensic investigator look for the Integrated Circuit Card ID
(ICCID) when collecting cellular evidence? - ANSWER ✓ Mobile phone
device
28.How should a forensic investigator preserve evidence on a cell phone during
transport without altering any digital evidence? - ANSWER ✓ Place the
device in a Faraday bag
29.What allows for a lawful search to be conducted without a warrant or
probable cause? - ANSWER ✓ Consent of person with authority
30.A forensic investigator is tasked with retrieving evidence where the primary
server has been erased. The investigator needs to rely on network logs and
backup tapes to base their conclusions on while testifying in court. Which
information found in rules of evidence, Rule 1001, helps determine if this
testimony is acceptable to the court? - ANSWER ✓ Definition of original
evidence
31.When can a forensic investigator collect evidence without formal consent? -
ANSWER ✓ When properly worded banners are displayed on the computer
screen
32.Who determines whether a forensic investigation should take place if a
situation is undocumented in the standard operating procedures? - ANSWER
✓ Decision maker
33.Which web application weakness allows sensitive data to be unintentionally
revealed to an unauthorized user? - ANSWER ✓ Information leakage
34.What is the focus of the enterprise theory of investigation (ETI)? -
ANSWER ✓ Solving one crime can tie it back to a criminal organization's
activities.
