WGU D431 UPDATED EXAM SCRIPT QUESTIONS AND
SOLUTIONS GUARANTEE A+
✔✔Order of Volatility - ✔✔1. Registers and cache
2. Routing table, process table
3. ARP cache
4. Process table
5. Kernel statistics and modules
6. Main memory
7. Archival media
8. Secondary memory
9. Router configuration
10. Network toplogy
✔✔The standards document, RFC 3227, presents guidelines for evidence collection
and archiving. These are not regulatory requirements, but rather suggested guidelines.
This exact order may not be applicable to every investgation. - ✔✔1. Volitile data
2. File slack
3. File system
4. Registry
5. Memory dumps
6. System state backups
7. Internet traces
✔✔.pst - ✔✔Outlook
✔✔.ost - ✔✔Offline Outlook Storage
✔✔.mbx - ✔✔Outlook Express
✔✔.dbx - ✔✔Outlook Express
✔✔.mbx - ✔✔Eudora
✔✔Which storage tech uses NAND? - ✔✔SSD
✔✔What uses AFF file format? - ✔✔Autopsy and Sleuth Kit
✔✔Which tool makes a bit-by-bit copy of a windows 8 phone? - ✔✔FTK
✔✔What is used to unlock iphone? - ✔✔XRY
✔✔What is Data Doctor? - ✔✔simrestore
SOLUTIONS GUARANTEE A+
✔✔Order of Volatility - ✔✔1. Registers and cache
2. Routing table, process table
3. ARP cache
4. Process table
5. Kernel statistics and modules
6. Main memory
7. Archival media
8. Secondary memory
9. Router configuration
10. Network toplogy
✔✔The standards document, RFC 3227, presents guidelines for evidence collection
and archiving. These are not regulatory requirements, but rather suggested guidelines.
This exact order may not be applicable to every investgation. - ✔✔1. Volitile data
2. File slack
3. File system
4. Registry
5. Memory dumps
6. System state backups
7. Internet traces
✔✔.pst - ✔✔Outlook
✔✔.ost - ✔✔Offline Outlook Storage
✔✔.mbx - ✔✔Outlook Express
✔✔.dbx - ✔✔Outlook Express
✔✔.mbx - ✔✔Eudora
✔✔Which storage tech uses NAND? - ✔✔SSD
✔✔What uses AFF file format? - ✔✔Autopsy and Sleuth Kit
✔✔Which tool makes a bit-by-bit copy of a windows 8 phone? - ✔✔FTK
✔✔What is used to unlock iphone? - ✔✔XRY
✔✔What is Data Doctor? - ✔✔simrestore