DFCS 605 Unit 3 Quiz Questions With Correct Solutions, Already Passed!!

Question 1 (6 points) The is the name of the hierarchical database on Windows-based computers that contains a list of settings for the operating system and applications. The database also contains a list of file extensions and maps them to icons, applications, and related actions. Question 1 options: Definitions Registry System Config_Files Question 2 (6 points) are the two characters that are used as the file signature for executable files on Windows-based computers. Question 2 options: JPG BMP EX MZ Question 3 (6 points) File carving can be described as the reconstruction of deleted files from unallocated storage based on file system metadata, and deleted file recovery is the reconstruction of deleted files from unallocated storage based on file content with the absence of file system metadata. Question 3 options: True False Question 4 (6 points) Is it possible to examine a file’s signature using FTK Imager? Question 4 options: Yes No Question 5 (6 points) A is the process of examining a file to determine if its extension has been changed. It starts by examining the initial bytes in the file’s header. Question 5 options: Extension check Fuzzy hashing File signature analysis File hashing comparison