WGU D431 OA Exam fully solved & updated (latest version verified for
accuracy) | Latest!!
.pst - (ANSWER)Outlook
.ost - (ANSWER)Offline Outlook Storage
.mbx - (ANSWER)Outlook Express
.dbx - (ANSWER)Outlook Express
.mbx - (ANSWER)Eudora
Which storage tech uses NAND? - (ANSWER)SSD
What uses AFF file format? - (ANSWER)Autopsy and Sleuth Kit
Which tool makes a bit-by-bit copy of a windows 8 phone? - (ANSWER)FTK
What is used to unlock iphone? - (ANSWER)XRY
What is Data Doctor? - (ANSWER)simrestore
How does windows store pw? - (ANSWER)hash
Where do deleted Apple iphone/ipad files go? - (ANSWER)/.Trashes/501
Pwnage - (ANSWER)This utility allows you to unlock a locked iPod Touch
, WGU D431 OA Exam fully solved & updated (latest version verified for
accuracy) | Latest!!
This is probably the most important log from a forensics point of view. It has both successful and
unsuccessful login events. - (ANSWER)Security log
This is a very important directory to look at for evidence. - (ANSWER)C:\Users\username\Documents
Where will Windows store the hash_______in the Windows system directory - (ANSWER)SAM (Security
Accounts Manager) file
_____is the information to be hidden - (ANSWER)Payload
The _____is the signal, stream, or file in which the payload is hidden. - (ANSWER)Carrier
The _____is the type of medium used. This may be a passive channel, such as photos, video, or sound
files, or even an active channel, such as a Voice over IP (VoIP) voice call or streaming video connection. -
(ANSWER)Channel
_____is particularly useful at cracking passwords. - (ANSWER)Forensic Toolkit (FTK)
The ______from AccessData is another widely used forensics analysis tool is also very popular with law
enforcement. - (ANSWER)Forensic Toolkit (FTK)
The evidence file is an exact copy of the hard drive. _____calculates an MD5 hash when the drive is
acquired. The hash is used to check for changes, alterations, or errors. - (ANSWER)EnCase
Because there are no moving parts, these drives are resilient to shock damage (i.e., dropping them
probably won't hurt them. - (ANSWER)USB thumb drives
The _____was invented by Basis Technology - (ANSWER)advanced forensic file format (AFF)
accuracy) | Latest!!
.pst - (ANSWER)Outlook
.ost - (ANSWER)Offline Outlook Storage
.mbx - (ANSWER)Outlook Express
.dbx - (ANSWER)Outlook Express
.mbx - (ANSWER)Eudora
Which storage tech uses NAND? - (ANSWER)SSD
What uses AFF file format? - (ANSWER)Autopsy and Sleuth Kit
Which tool makes a bit-by-bit copy of a windows 8 phone? - (ANSWER)FTK
What is used to unlock iphone? - (ANSWER)XRY
What is Data Doctor? - (ANSWER)simrestore
How does windows store pw? - (ANSWER)hash
Where do deleted Apple iphone/ipad files go? - (ANSWER)/.Trashes/501
Pwnage - (ANSWER)This utility allows you to unlock a locked iPod Touch
, WGU D431 OA Exam fully solved & updated (latest version verified for
accuracy) | Latest!!
This is probably the most important log from a forensics point of view. It has both successful and
unsuccessful login events. - (ANSWER)Security log
This is a very important directory to look at for evidence. - (ANSWER)C:\Users\username\Documents
Where will Windows store the hash_______in the Windows system directory - (ANSWER)SAM (Security
Accounts Manager) file
_____is the information to be hidden - (ANSWER)Payload
The _____is the signal, stream, or file in which the payload is hidden. - (ANSWER)Carrier
The _____is the type of medium used. This may be a passive channel, such as photos, video, or sound
files, or even an active channel, such as a Voice over IP (VoIP) voice call or streaming video connection. -
(ANSWER)Channel
_____is particularly useful at cracking passwords. - (ANSWER)Forensic Toolkit (FTK)
The ______from AccessData is another widely used forensics analysis tool is also very popular with law
enforcement. - (ANSWER)Forensic Toolkit (FTK)
The evidence file is an exact copy of the hard drive. _____calculates an MD5 hash when the drive is
acquired. The hash is used to check for changes, alterations, or errors. - (ANSWER)EnCase
Because there are no moving parts, these drives are resilient to shock damage (i.e., dropping them
probably won't hurt them. - (ANSWER)USB thumb drives
The _____was invented by Basis Technology - (ANSWER)advanced forensic file format (AFF)
