WGU D431 OBJECTIVE ASSESSMENT REVIEW (NEW
2025-2026 UPDATE) DIGITAL FORENSICS IN
CYBERSECURITY QS & AS GRADE A 100% CORRECT
(VERIFIED ANSWERS)
What is The Advanced Forensic Format (AFF) - ANS ✓It is an
open file standard with three variations: AFF, AFM, and AFD. The
AFF variation stores all data and metadata in a single file.
What are the five type of drive connection types? - ANS
✓Integrated Drive Electronics (IDE)
Extended Integrated Drive Electronics (EIDE)
Parallel Advanced Technology Attachment (PATA)
Serial Advanced Technology Attachment (SATA)
Serial SCSI
What are the 3 techniques for forensic analysis? - ANS ✓Live
Analysis, Physical Analysis, Logical Analysis
What measures should be taken when gathering evidence? -
ANS ✓Avoid changing the evidence, Determine when evidence was
created, Search throughout the device, Determine information
about encrypted and steganized files, Present the evidence well
What is Temporary Data? - ANS ✓Data that an operating system
creates and overwrites without the computer user taking a direct
action to save this data.
What are some examples of Volatile Data? - ANS ✓Swap file,
State of Network connections, State of running processes.
, WGU D431 OBJECTIVE ASSESSMENT REVIEW (NEW
2025-2026 UPDATE) DIGITAL FORENSICS IN
CYBERSECURITY QS & AS GRADE A 100% CORRECT
(VERIFIED ANSWERS)
Swap file, State of Network connections, State of running
processes. - ANS ✓Volatile data, Temporary data, and Persistent
data.
What are the 3 basic tasks to handling evidence? - ANS ✓Find
evidence, Preserve evidence, Prepare evidence.
What are the principles when gathering evidence? - ANS
✓Avoid changing the evidence, Determine when evidence was
created, Trust only physical evidence, search throughout the
device, present the evidence well.
What are the 3 basic tasks related to handling evidence? -
ANS ✓Find evidence, Preserve evidence, and Prepare evidence.
What is "file slack" or "slack space"? - ANS ✓The unused space
between the logical end of file and the physical end of file. It is also
called slack space.
What is the SWGDE Framework - ANS ✓Collect
Preserve
Examine
Transfer
What is the Digital Forensic Research Workshop (DFRWS)
Framework? - ANS ✓Identification
Preservation
Collection
Examination
2025-2026 UPDATE) DIGITAL FORENSICS IN
CYBERSECURITY QS & AS GRADE A 100% CORRECT
(VERIFIED ANSWERS)
What is The Advanced Forensic Format (AFF) - ANS ✓It is an
open file standard with three variations: AFF, AFM, and AFD. The
AFF variation stores all data and metadata in a single file.
What are the five type of drive connection types? - ANS
✓Integrated Drive Electronics (IDE)
Extended Integrated Drive Electronics (EIDE)
Parallel Advanced Technology Attachment (PATA)
Serial Advanced Technology Attachment (SATA)
Serial SCSI
What are the 3 techniques for forensic analysis? - ANS ✓Live
Analysis, Physical Analysis, Logical Analysis
What measures should be taken when gathering evidence? -
ANS ✓Avoid changing the evidence, Determine when evidence was
created, Search throughout the device, Determine information
about encrypted and steganized files, Present the evidence well
What is Temporary Data? - ANS ✓Data that an operating system
creates and overwrites without the computer user taking a direct
action to save this data.
What are some examples of Volatile Data? - ANS ✓Swap file,
State of Network connections, State of running processes.
, WGU D431 OBJECTIVE ASSESSMENT REVIEW (NEW
2025-2026 UPDATE) DIGITAL FORENSICS IN
CYBERSECURITY QS & AS GRADE A 100% CORRECT
(VERIFIED ANSWERS)
Swap file, State of Network connections, State of running
processes. - ANS ✓Volatile data, Temporary data, and Persistent
data.
What are the 3 basic tasks to handling evidence? - ANS ✓Find
evidence, Preserve evidence, Prepare evidence.
What are the principles when gathering evidence? - ANS
✓Avoid changing the evidence, Determine when evidence was
created, Trust only physical evidence, search throughout the
device, present the evidence well.
What are the 3 basic tasks related to handling evidence? -
ANS ✓Find evidence, Preserve evidence, and Prepare evidence.
What is "file slack" or "slack space"? - ANS ✓The unused space
between the logical end of file and the physical end of file. It is also
called slack space.
What is the SWGDE Framework - ANS ✓Collect
Preserve
Examine
Transfer
What is the Digital Forensic Research Workshop (DFRWS)
Framework? - ANS ✓Identification
Preservation
Collection
Examination
