WGU D431 DIGITAL FORENSICS EXAM
UPDATED EXAM SCRIPT WITH COMPLETE
ANSWERS
◉ Digital Forensics.
Answer: A discipline that combines elements of law and computer
science in order to collect and analyze computer data from a variety
of computer systems, networks, storage devices, and other devices
using digital communications as the source and flow of information
in a way that is admissible as evidence in a court of law.
◉ Digital forensics includes computer forensics as well as forensics
on all other digital devices capable of storing digital data.
Answer: True
◉ Forensic Tools.
Answer: *Network forensics
*Mobile device forensics
*Activity tracking device forensics, etc.
◉ True.
,Answer: DF investigation does not need to have deepest
understanding on theoretic knowledge on CS but must have a
familiarity with a wide range of subject matter.
◉ As a target of the crime.
Answer: e.g., computer network intrusion, DDOS attack
◉ As an instrument of the crime.
Answer: Cyber Stalking and bullying
Identity theft
Pirated computer software
Forgery or falsification of documents
Corporate fraud
Terrorism and national security
◉ Locard's Exchange Principle.
Answer: Everything that enters a crime scene does two things. It
leaves part of itself behind, and it takes part of the scene with it.
◉ True.
Answer: According to some studies, almost 95 percent of criminals
leave evidence which could be investigated through computer
forensic procedure.
, ◉ (Paul Kirk, 1953).
Answer: Physical evidence cannot be wrong or wholly absent. Only
human failure to find it, study and understand it, can diminish its
value
◉ Real evidence.
Answer: Things you can carry to court and show
◉ Testimonial evidence.
Answer: To support or validate other evidence types
◉ Documentary evidence.
Answer: Files, log, e-mail
◉ Demonstrative evidence.
Answer: To recreate or explain other evidence
◉ Child Exploitation.
Answer: Chat log, photo/video, image editing software, internet/SNS
activity, movie files, relevant file and directory names
UPDATED EXAM SCRIPT WITH COMPLETE
ANSWERS
◉ Digital Forensics.
Answer: A discipline that combines elements of law and computer
science in order to collect and analyze computer data from a variety
of computer systems, networks, storage devices, and other devices
using digital communications as the source and flow of information
in a way that is admissible as evidence in a court of law.
◉ Digital forensics includes computer forensics as well as forensics
on all other digital devices capable of storing digital data.
Answer: True
◉ Forensic Tools.
Answer: *Network forensics
*Mobile device forensics
*Activity tracking device forensics, etc.
◉ True.
,Answer: DF investigation does not need to have deepest
understanding on theoretic knowledge on CS but must have a
familiarity with a wide range of subject matter.
◉ As a target of the crime.
Answer: e.g., computer network intrusion, DDOS attack
◉ As an instrument of the crime.
Answer: Cyber Stalking and bullying
Identity theft
Pirated computer software
Forgery or falsification of documents
Corporate fraud
Terrorism and national security
◉ Locard's Exchange Principle.
Answer: Everything that enters a crime scene does two things. It
leaves part of itself behind, and it takes part of the scene with it.
◉ True.
Answer: According to some studies, almost 95 percent of criminals
leave evidence which could be investigated through computer
forensic procedure.
, ◉ (Paul Kirk, 1953).
Answer: Physical evidence cannot be wrong or wholly absent. Only
human failure to find it, study and understand it, can diminish its
value
◉ Real evidence.
Answer: Things you can carry to court and show
◉ Testimonial evidence.
Answer: To support or validate other evidence types
◉ Documentary evidence.
Answer: Files, log, e-mail
◉ Demonstrative evidence.
Answer: To recreate or explain other evidence
◉ Child Exploitation.
Answer: Chat log, photo/video, image editing software, internet/SNS
activity, movie files, relevant file and directory names
