CSIA 135 Final Exam Version 1 Questions
And Answers Practice Questions with
Solutions Newest | Already Graded A+
Warning banner - Answer--Before signing on to a system, what does a user usually
read that describes the user's responsibilities while using the system?
Chain of custody - Answer--In a forensic investigation, what documents the
evidence-gathering process and includes the history and possession of a sample
from the time of its collection to its final disposition?
arp - Answer--What command displays the mappings between different layers of the
network architecture?
DriveSpy - Answer--What disk-forensic tool creates direct disk-to-disk forensic
duplicates and can copy a range of sectors within or between drives?
Search warrant - Answer--What is a written order issued by a judge that directs a law
enforcement officer to search for a particular piece of evidence at a particular
location?
Time-frame analysis - Answer--What process can contribute to associating events
that occurred on a computer with a particular individual?
Slack space - Answer--What represents the space that exists between the end of the
file and the end of the last cluster used by that file?
Incident - Answer--What term defines an event that threatens the security of a
computer system or network in an organization?
Best practices - Answer--What term defines is defined as an empirically proven set
of methods for performing a task in the best and most efficient way?
Bit-stream copy - Answer--Which of the following refers to a bit-by-bit copy of the
original storage medium?
Location where obtained - Answer--A chain of custody document contains the
following information about the obtained evidence:
, as potential evidence - Answer--How should electronic devices gathered at a crime
scene be treated?
Volatility - Answer--What is the term that measures of how perishable electronically
stored data is?
exhibit numbering - Answer--What procedure requires evidence to be marked using
the format aaa/ddmmyy/nnnn/zz?
identify the scene - Answer--What should a first responder do immediately after
arriving at a crime scene?
File cabinet - Answer--Which of the following is NOT a potential source for electronic
evidence?
it should be photographed - Answer--identify the scene
first responder toolkit - Answer--Which of the following is a set of tested tools
designed to help in collecting genuine presentable evidence?
chain of custody - Answer--Which of the following is a written description created by
individuals who are responsible for the evidence from the beginning until the end of
the case?
first responder - Answer--Which term refers to a person who first arrives at a crime
scene and accesses the victim's computer system once the incident has been
reported?
Subversion - Answer--In what type of incident might the perpetrator modify Web links
so that whenever anyone uses one of the links, they are redirected to an unrelated
Web address?
Repudiation - Answer--In which type of incident does a person or program, acting on
behalf of another person, perform an invalid action?
reconnaissance - Answer--To which type of attack are DSL and cable modems more
exposed due to the connections usually being open?
extortion - Answer--What type of incident forces the victim to pay money to the
attacker by threatening to reveal information that could lead to a severe loss for the
victim?
detecting intrusions - Answer--Which incident-prevention strategy might involve the
review of Internet Security and Acceleration (ISA) Server logs?
And Answers Practice Questions with
Solutions Newest | Already Graded A+
Warning banner - Answer--Before signing on to a system, what does a user usually
read that describes the user's responsibilities while using the system?
Chain of custody - Answer--In a forensic investigation, what documents the
evidence-gathering process and includes the history and possession of a sample
from the time of its collection to its final disposition?
arp - Answer--What command displays the mappings between different layers of the
network architecture?
DriveSpy - Answer--What disk-forensic tool creates direct disk-to-disk forensic
duplicates and can copy a range of sectors within or between drives?
Search warrant - Answer--What is a written order issued by a judge that directs a law
enforcement officer to search for a particular piece of evidence at a particular
location?
Time-frame analysis - Answer--What process can contribute to associating events
that occurred on a computer with a particular individual?
Slack space - Answer--What represents the space that exists between the end of the
file and the end of the last cluster used by that file?
Incident - Answer--What term defines an event that threatens the security of a
computer system or network in an organization?
Best practices - Answer--What term defines is defined as an empirically proven set
of methods for performing a task in the best and most efficient way?
Bit-stream copy - Answer--Which of the following refers to a bit-by-bit copy of the
original storage medium?
Location where obtained - Answer--A chain of custody document contains the
following information about the obtained evidence:
, as potential evidence - Answer--How should electronic devices gathered at a crime
scene be treated?
Volatility - Answer--What is the term that measures of how perishable electronically
stored data is?
exhibit numbering - Answer--What procedure requires evidence to be marked using
the format aaa/ddmmyy/nnnn/zz?
identify the scene - Answer--What should a first responder do immediately after
arriving at a crime scene?
File cabinet - Answer--Which of the following is NOT a potential source for electronic
evidence?
it should be photographed - Answer--identify the scene
first responder toolkit - Answer--Which of the following is a set of tested tools
designed to help in collecting genuine presentable evidence?
chain of custody - Answer--Which of the following is a written description created by
individuals who are responsible for the evidence from the beginning until the end of
the case?
first responder - Answer--Which term refers to a person who first arrives at a crime
scene and accesses the victim's computer system once the incident has been
reported?
Subversion - Answer--In what type of incident might the perpetrator modify Web links
so that whenever anyone uses one of the links, they are redirected to an unrelated
Web address?
Repudiation - Answer--In which type of incident does a person or program, acting on
behalf of another person, perform an invalid action?
reconnaissance - Answer--To which type of attack are DSL and cable modems more
exposed due to the connections usually being open?
extortion - Answer--What type of incident forces the victim to pay money to the
attacker by threatening to reveal information that could lead to a severe loss for the
victim?
detecting intrusions - Answer--Which incident-prevention strategy might involve the
review of Internet Security and Acceleration (ISA) Server logs?
