• Wrong document? Swap it for free
  • Written by students who passed
  • Immediately available after payment
  • Read online or as PDF
  • 4.6 TrustPilot
0
Sell
Where do you study
Your language
Start selling Create your account
  • DFIR
  • DFIR
To add items to your wishlist, you must be logged in
Document preview thumbnail
Preview 1 out of 4 pages
Exam (elaborations)

DFIR (Digital Forensics and Incident Response) – Exam Question Bank with Verified Answers

0.0
(0 reviews)
- sold
4 pages
2024/2025 Written for academic year
Institution DFIR
Course DFIR
Document preview thumbnail
Preview 1 out of 4 pages

This exam-focused document provides a wide-ranging set of multiple-choice and multi-answer questions with verified answers for Digital Forensics and Incident Response (DFIR). Topics include steganography, sandboxing, incident response lifecycle (NIST), forensic tool comparisons (Wireshark vs. tcpdump), malware persistence methods, Windows event classifications, and drive cloning. A critical resource for students and professionals preparing for DFIR exams or certifications.

Content preview

DFIR Exam questions with accurate answers
How is a file hidden using steganography? Ans✓✓✓By hiding a file
within another file


What is a sandbox used for? Ans✓✓✓To test malware in an isolated
environment


What is the correct incident response lifecycle per the NIST incident
response methodology? Ans✓✓✓Preparation, Detection and Analysis,
Containment, Eradication and Recovery, and Post-Incident Activity


What is the difference between Wireshark and tcpdump?
Ans✓✓✓tcpdump is command-based; Wireshark has a GUI interface.


What is the responsibility of a CISO? Ans✓✓✓To create a strategy for
data and IT asset protection and maintain it


Which of the following are commonly used for malware persistence?
(Choose all correct answers.) Ans✓✓✓Scheduled tasks
Correct! Registry keys
Correct! Services


Which of the following is a Windows Event Viewer classification?
(Choose all correct answers.) Ans✓✓✓Debug
Correct! Alert

Document information

Uploaded on
June 26, 2025
Number of pages
4
Written in
2024/2025
Type
Exam (elaborations)
Contains
Questions & answers
Report Copyright Violation
$18.99
Wrong document? Swap it for free Within 14 days of purchase and before downloading, you can choose a different document. You can simply spend the amount again.
Written by students who passed
Immediately available after payment
Read online or as PDF
Seller avatar
Reputation scores are based on the amount of documents a seller has sold for a fee and the reviews they have received for those documents. There are three levels: Bronze, Silver and Gold. The better the reputation, the more your can rely on the quality of the sellers work.
cracker
3.8
(401)
Sold
2168
Followers
1346
Items
50099
Last sold
3 days ago
Available in package deal
Product Image
Package deal
DFIR Study Bundle | Verified Q&A | Digital Forensics & Incident Response Guide
-
-
Sold
7
item
Jul 2025
$127.93
$51.26
You save 60% More Info

Browse related subjects

Subjects

  • dfir digital forensics and incident response e

Why students choose Stuvia

Created by fellow students, verified by reviews

Quality you can trust: written by students who passed their tests and reviewed by others who've used these notes.

Didn't get what you expected? Choose another document

No worries! You can instantly pick a different document that better fits what you're looking for.

Pay as you like, start learning right away

No subscription, no commitments. Pay the way you're used to via credit card and download your PDF document instantly.

Student with book image

“Bought, downloaded, and aced it. It really can be that simple.”

Alisha Student

Working on your references?

Create accurate citations in APA, MLA and Harvard with our free citation generator.

Learn more Create citation
Working on your references?

Frequently asked questions