Networking Forensics and Incident Response
questions with accurate answers
________ evidence is used to prove the innocence of a defendant.
Ans✓✓✓Exculpatory.
The opposite of that is incriminating is inculpatory.
____________ is a public-private agency of the FBI, which promotes
the exchange of information between the private and public sectors on
issues related to terrorism, intelligence, and security matters.
Ans✓✓✓Infragard
_____________ is a hierarchical database that stores system
configuration information. The Registry is comprised of two elements,
keys and values. Ans✓✓✓Windows Registry
_____________ is a Windows applications used to view event logs.
Ans✓✓✓Event Viewer
_____________ is the process of eliminating the amount of
fragmentation in a file system to make file chunks (512k blocks) closer
together and increase free space areas on a disk.
Ans✓✓✓Defragmentation
__________________ is the base 16 numbering system, which includes
numbers 0 to 9 and A to F. Ans✓✓✓Hexadecimal
, ____________________ file system that was introduced in the 1980s as
the first version of FAT and is the file system found on floppy disks.
Ans✓✓✓FAT12
____________________ refers to the structure of a hard disk in terms of
platters, tracks, and sectors. Ans✓✓✓Disk Geometry
A ________ is a device used to illegally capture the data stored on the
magnetic stripe of an ATM card, credit card, or debit card.
Ans✓✓✓Skimmer.
Surveillance video can be critical to the successful capture of criminals
using skimmers.
A ________is a logical storage unit on a disk. Ans✓✓✓Partition.
In computer forensics, we often hear this notion of physical versus
logical when it comes to file storage or files retrieved from a computer
or media storage.
A chain of custody (CoC) form is used to document which of the
following? Ans✓✓✓Anyone who has been in contact with evidence in
a case.
A defendant can prove his innocence with the use of _________
evidence. Ans✓✓✓exculpatory
questions with accurate answers
________ evidence is used to prove the innocence of a defendant.
Ans✓✓✓Exculpatory.
The opposite of that is incriminating is inculpatory.
____________ is a public-private agency of the FBI, which promotes
the exchange of information between the private and public sectors on
issues related to terrorism, intelligence, and security matters.
Ans✓✓✓Infragard
_____________ is a hierarchical database that stores system
configuration information. The Registry is comprised of two elements,
keys and values. Ans✓✓✓Windows Registry
_____________ is a Windows applications used to view event logs.
Ans✓✓✓Event Viewer
_____________ is the process of eliminating the amount of
fragmentation in a file system to make file chunks (512k blocks) closer
together and increase free space areas on a disk.
Ans✓✓✓Defragmentation
__________________ is the base 16 numbering system, which includes
numbers 0 to 9 and A to F. Ans✓✓✓Hexadecimal
, ____________________ file system that was introduced in the 1980s as
the first version of FAT and is the file system found on floppy disks.
Ans✓✓✓FAT12
____________________ refers to the structure of a hard disk in terms of
platters, tracks, and sectors. Ans✓✓✓Disk Geometry
A ________ is a device used to illegally capture the data stored on the
magnetic stripe of an ATM card, credit card, or debit card.
Ans✓✓✓Skimmer.
Surveillance video can be critical to the successful capture of criminals
using skimmers.
A ________is a logical storage unit on a disk. Ans✓✓✓Partition.
In computer forensics, we often hear this notion of physical versus
logical when it comes to file storage or files retrieved from a computer
or media storage.
A chain of custody (CoC) form is used to document which of the
following? Ans✓✓✓Anyone who has been in contact with evidence in
a case.
A defendant can prove his innocence with the use of _________
evidence. Ans✓✓✓exculpatory
