Cyber Incident Response and Digital Forensics
questions with verified answers
ABC Publishing learns that the new novel by Jane Smith that it has not
yet sent to print is appearing on XYZ Booksellers in a full PDF version.
Which type of digital forensics investigation will ABC begin?
Ans✓✓✓an intellectual property digital forensics investigation
After you have analyzed the Indications of compromise you are unsure if
an incident has in fact occurred. How will you categorize this?
Ans✓✓✓Suspicious
As you begin your investigation you should capture an AD1 file. Why
would you do this? Ans✓✓✓An AD1 file is a combination file of the
RAM and the swap file.
At which stage of a cyber incident response will you spend most of your
time? Ans✓✓✓Detection and Analysis
How are forensic bridges used in a cyber incident response?
Ans✓✓✓They make a bit-by-bit copy of a hard disk while keeping the
original suspect drive unaltered.
Under the Daubert Test court decision, how do commercial digital
forensics tools compare to open-source tools as far as evidentiary value
in a criminal case? Ans✓✓✓Commercial digital forensics toolsets
provide strict details of known error rates.
questions with verified answers
ABC Publishing learns that the new novel by Jane Smith that it has not
yet sent to print is appearing on XYZ Booksellers in a full PDF version.
Which type of digital forensics investigation will ABC begin?
Ans✓✓✓an intellectual property digital forensics investigation
After you have analyzed the Indications of compromise you are unsure if
an incident has in fact occurred. How will you categorize this?
Ans✓✓✓Suspicious
As you begin your investigation you should capture an AD1 file. Why
would you do this? Ans✓✓✓An AD1 file is a combination file of the
RAM and the swap file.
At which stage of a cyber incident response will you spend most of your
time? Ans✓✓✓Detection and Analysis
How are forensic bridges used in a cyber incident response?
Ans✓✓✓They make a bit-by-bit copy of a hard disk while keeping the
original suspect drive unaltered.
Under the Daubert Test court decision, how do commercial digital
forensics tools compare to open-source tools as far as evidentiary value
in a criminal case? Ans✓✓✓Commercial digital forensics toolsets
provide strict details of known error rates.
