Digital Forensics Essentials Questions and Correct Answers Latest Update (Already Passed)

Digital Forensics Essentials Questions and Correct Answers Latest Update (Already Passed) Jack, a disgruntled employee of an organization, gained access to the organization's database server. He manipulated client records stored on the database server to damage the reputation of the organization and to make the organization face legal consequences for losing integrity. Identify the type of attack performed by Jack in the above scenario. External attack Brute-force attack Internal attack Trojan horse attack - Answers Internal Attack Identify the SWGDE standards and criteria stating that the agency management must review the SOPs on an annual basis to ensure their continued suitability and effectiveness. Standards and Criteria 1.1 Standards and Criteria 1.2 Standards and Criteria 1.3 Standards and Criteria 1.4 - Answers Standards and Criteria 1.2 James, a newly recruited employee of an organization, received an email containing a fake appointment letter. The letter claims to have been sent by the real organization. James failed to identify the legitimacy of the letter and downloaded it. Consequently, malicious software was installed on his system, and it provided remote access to the attacker. Identity the type of cybercrime performed by James in the above scenario. Denial-of-service attack Privilege escalation attack SQL injection attack Phishing attack - Answers Phishing Attack Which of the following types of cybercrime involves taking advantage of unsanitized input vulnerabilities to pass commands through a web application and thereby retrieve information from the target database? SQL injection attack Brute-force attack Espionage Trojan horse attack - Answers SQL injection attack Benjamin, a professional hacker, joined as an intern in an organization and obtained some permissions to access the resources related to his job. Soon after gaining trust in the organization, he obtained elevated permissions to access restricted parts of the network. Thus, he gained access to confidential data of the organization. Identify the type of attack performed by Benjamin in the above scenario. Session hijacking attack SQL injection attack Privilege escalation attack Denial-of-service attack - Answers Privilege escalation attack Henry, a professional hacker, targeted an organization to gain illegitimate access to its server. He launched an SQL injection attack from a remote location on the target server to obtain users' credentials. Which of the following types of attack has Henry performed in the above scenario? Insider attack Trojan horse attack External attack Internal attack - Answers External Attack Medicing Inc. targeted their competitor organization to steal information about their product that gained immense popularity within a brief period. For this purpose, Medicing Inc. employed Don, a professional hacker. Don performed open-source intelligence gathering and analyzed the target product's details. Using the obtained information, Medicing Inc. created a similar product and launched it with a lower price. Identify the cybercrime demonstrated in the above scenario. Privilege escalation Espionage Spoofing Phishing - Answers Espionage Don, a professional hacker, targeted Johana's official email account to steal her project-related files stored in it. In this process, Don tried all the possible combinations of password characters through the trial-and-error method and finally logged into her account. Identify the type of cybercrime demonstrated in the above scenario. Keylogger attack Brute-force attack Hybrid attack Dictionary attack - Answers Brute-force Attack Which of the following types of attack is performed using a seemingly harmless program containing malicious code that can later gain control and cause damage, such as destruction of the file allocation table on a hard disk? - Answers Trojan Horse Attack Identify the type of cybercrime that involves the theft of trade secrets, copyrights, or patent rights of an asset or material belonging to individuals or entities, resulting in huge losses to the target organization. Intellectual property theft Data manipulation Phishing Trojan horse attack - Answers Intellectual property theft Which of the following types of cybercrime is an offensive activity in which a computer connected to the web is employed as a source point to damage an organization's reputation? Privilege escalation Cyber defamation Data manipulation Intellectual property theft - Answers Cyber defamation Which of the following types of digital evidence in a computer system will be lost as soon as the system is powered off? Swap file Slack space Non-volatile data Volatile data - Answers Volatile Data Which of the following types of digital evidence is temporary information on a digital device that requires constant power supply to retain and is deleted if the power supply is interrupted? Unallocated clusters Slack space Non-volatile data Volatile data - Answers Volatile Data Grayson, a forensic investigator, was able to retrieve evidence from a device by authenticating with the information of a card and the user through the level of access, configurations, and permissions. Identify the device utilized by Grayson to obtain the evidence Surveillance camera Thumb drive Router Biometric scanner - Answers Biometric Scanner Calvin, a forensic crime investigator, retrieved evidence from a device that consists of usage logs, time and date information, network identity information, and ink cartridges. Identify the device from which Calvin obtained the evidence. Switch Printer Modem Hub - Answers Printer Which of the following rules of evidence states that investigators must provide supporting documents regarding the legitimacy of the evidence, with details such as the source of the evidence and its relevance to the case? Authentic Admissible Reliable Complete - Answers Authentic Identify the rule of evidence stating that investigators and prosecutors must present evidence in a clear and comprehensible manner to the members of the jury. Reliable Authentic Understandable Admissible - Answers Understandable John, a security specialist, was investigating a criminal case. He extracted all the possible evidence from a suspected laptop, created an exact copy of the evidence, and submitted the evidence as is to the jury members without any intermediary tampering. Identify the evidence rule demonstrated in the above scenario. Understandable Authentic Admissible Reliable - Answers Reliable Jayden, a forensic investigator, was appointed to investigate a powered-off system recovered from a crime scene. He found many locked files in that computer and suspected that those files might contain information useful to identify the criminals. Which of the following evidence sources provided Jayden with useful information during the investigation? Password-protected files Compressed files Hidden files Misnamed files - Answers Password-protected files Which of the following is a user-created evidence source that can assist forensic investigators in recording and analyzing whether the victim stored any malicious links or URLs? Database files Internet bookmarks