CSIA 135 Final Questions With 100% Correct Answers

Before signing on to a system, what does a user usually read that describes the user's responsibilities while using the system? - Answer-Warning banner In a forensic investigation, what documents the evidence-gathering process and includes the history and possession of a sample from the time of its collection to its final disposition? - Answer-Chain of custody What command displays the mappings between different layers of the network architecture? - Answer-arp What disk-forensic tool creates direct disk-to-disk forensic duplicates and can copy a range of sectors within or between drives? - Answer-DriveSpy What is a written order issued by a judge that directs a law enforcement officer to search for a particular piece of evidence at a particular location? - Answer-Search warrant What process can contribute to associating events that occurred on a computer with a particular individual? - Answer-Time-frame analysis What represents the space that exists between the end of the file and the end of the last cluster used by that file? - Answer-Slack space What term defines an event that threatens the security of a computer system or network in an organization? - Answer-Incident What term defines is defined as an empirically proven set of methods for performing a task in the best and most efficient way? - Answer-Best practices Which of the following refers to a bit-by-bit copy of the original storage medium? - Answer-Bitstream copy A chain of custody document contains the following information about the obtained evidence: - Answer-Location where obtainedHow should electronic devices gathered at a crime scene be treated? - Answer-as potential evidence What is the term that measures of how perishable electronically stored data is? - Answer-Volatility What procedure requires evidence to be marked using the format aaa/ddmmyy/nnnn/zz? - Answerexhibit numbering What should a first responder do immediately after arriving at a crime scene? - Answer-identify the scene Which of the following is NOT a potential source for electronic evidence? - Answer-File cabinet identify the scene - Answer-it should be photographed Which of the following is a set of tested tools designed to help in collecting genuine presentable evidence? - Answer-first responder toolkit Which of the following is a written description created by individuals who are responsible for the evidence from the beginning until the end of the case? - Answer-chain of custody Which term refers to a person who first arrives at a crime scene and accesses the victim's computer system once the incident has been reported? - Answer-first responder In what type of incident might the perpetrator modify Web links so that whenever anyone uses one of the links, they are redirected to an unrelated Web address? - Answer-Subversion In which type of incident does a person or program, acting on behalf of another person, perform an invalid action? - Answer-Repudiation To which type of attack are DSL and cable modems more exposed due to the connections usually being open? - Answer-reconnaissance