ANSWERS
what is validation - CORRECT ANSWER✅✅✅a way to confirm a tool is functioning as
intended
what is verification - CORRECT ANSWER✅✅✅proves that two sets of data are identical
by calculating hash values or using another method
does a keyword search always speed up an investigation? - CORRECT ANSWER✅✅✅no,
not always
how can you add more flexibility and reliability to investigations? - CORRECT
ANSWER✅✅✅creating a software library with older versions of software's and programs.
what is Helix 3? - CORRECT ANSWER✅✅✅easiest linux suite to use
can be loaded on a live windows system
some international courts have not accepted live acquisitions
advantages of GUI forensic tools - CORRECT ANSWER✅✅✅ease of use
multitasking
no need for learning older OSs
disadvantages of GUI forensics tools - CORRECT ANSWER✅✅✅excessive resource
requirements
produce inconsistent results
create tool dependencies
what standard specifics that results must be repeatable and reproducible - CORRECT
ANSWER✅✅✅ISO 5725
, how should you verify your results - CORRECT ANSWER✅✅✅by preforming the same
tasks with other similar forensics tools
how many tools should you use to verify results - CORRECT ANSWER✅✅✅at least 2
what is digital forensics examination protocol - CORRECT ANSWER✅✅✅preform the
investigation with a GUI tool
verify your results with a disk editor
compare hash values obtained with both tools
graphic files - CORRECT ANSWER✅✅✅contain digital photos, line art, images
bitmap images - CORRECT ANSWER✅✅✅stores graphic information as grids of
individual pixels
raster images - CORRECT ANSWER✅✅✅collection of pixels stored in rows, better for
printing
vector graphics - CORRECT ANSWER✅✅✅uses lines instead of dots
smaller than bitmap files
preserve quality when image is enlarged
metafile graphics - CORRECT ANSWER✅✅✅combine bitmap and vector graphics
standard bitmap file formats - CORRECT ANSWER✅✅✅.png
.gif
.jpeg, .jpg
.bmp