WGU C702 CYBERSECURITY AND INFORMATION ASSURANCE QUESTIONS & ANSWERS 2… EXAM
P R O F E S S I O N A L P R A C T I C E M AT E R I A L S
WGU C702 Cybersecurity and
Information Assurance
Questions & Answers 2026-
2027 | CHFI & Objective
Assessment
Verified Answers Exam Ready With Rationales
214 QUESTIONS
DOCUMENT OVERVIEW
This document contains 214 questions with correct answers provided, focusing on cybersecurity and
information assurance. It encompasses key concepts and principles relevant to the field, ensuring a
comprehensive review of computer forensics and cybercrime investigation. Learners can utilize this
resource for effective study, thorough review, and preparation for certification exams in cybersecurity.
CONTENTS
• Computer Forensics Basics • Investigation Methodologies
• Cybercrime Fundamentals • Legal Aspects of Forensics
• Expert Testimony and Ethics • Data Storage and File Systems
• Operating System Forensics • Data Recovery Tools
• Network Security and Attacks • Web Application Security
• Cloud Computing Forensics • Email Forensics
• Mobile Device Forensics
Page 1
, E XA M Q U EST I O N S
Q1 QUESTION 1 OF 214
Which of the following is true regarding computer forensics?
CORRECT ANSWER
Computer forensics deals with the process of finding evidence related to a digital crime to find the culprits and initiate legal
action against them.
Q2 QUESTION 2 OF 214
Which of the following is NOT a objective of computer forensics?
CORRECT ANSWER
Document vulnerabilities allowing further loss of intellectual property, finances, and reputation during an attack.
Q3 QUESTION 3 OF 214
Forensic readiness refers to:
CORRECT ANSWER
An organization's ability to make optimal use of digital evidence in a limited time period and with minimal investigation
costs.
Q4 QUESTION 4 OF 214
Which of the following is true of cybercrimes?
CORRECT ANSWER
The initial reporting of the evidence is usually informal.
Q5 QUESTION 5 OF 214
Computer Forensics deals with the process of finding _____ related to a digital crime to find the culprits and initiate
legal action against them.
CORRECT ANSWER
Evidence.
Page 2
, Q6 QUESTION 6 OF 214
Minimizing the tangible and intangible losses to the organization or an individual is considered an essential computer
forensics use.
CORRECT ANSWER
True.
Q7 QUESTION 7 OF 214
Which of the following is NOT part of the Computer Forensics Investigation Methodology?
CORRECT ANSWER
Testify as an expert defendant.
Q8 QUESTION 8 OF 214
Which of the following is NOT part of the Computer Forensics Investigation Methodology?
CORRECT ANSWER
Destroy the evidence.
Q9 QUESTION 9 OF 214
Identify the following which was launched by the National Institute of Standards and Technology (NIST), that
establishes a "methodology for testing computer forensics software tools by development of general tool
specifications, test procedures, test criteria, test sets, and test hardware."
CORRECT ANSWER
Computer Forensic Tool Testing Project (CFTTP)
Q10 QUESTION 10 OF 214
What is a machine readable language used in major digital operations, such as sending and receiving emails?
CORRECT ANSWER
ASCII
Q11 QUESTION 11 OF 214
Forensic data duplication involves the creation of a file that has every bit of information from the source in a raw bit-
stream format.
Page 3
, CORRECT ANSWER
True.
Q12 QUESTION 12 OF 214
What is NOT a command used to determine open files
CORRECT ANSWER
Open files
Q13 QUESTION 13 OF 214
Investigators can use Linux commands to gather necessary information from the system. Identify the following shell
command that is used to display the kernel ring buffer or information about device drivers loaded into the kernel.
CORRECT ANSWER
dmesg
Q14 QUESTION 14 OF 214
What is a proprietary information security standard for organizations that handle cardholder information for major
debit, credit, prepaid, e-purse, ATM, and POS cards?
CORRECT ANSWER
PCI DSS
Q15 QUESTION 15 OF 214
Which web application threat occurs when attackers insert malicious code, commands, or scripts into the input gates
of web applications, enabling the applications to interpret and run the newly supplied malicious input?
CORRECT ANSWER
Injection flaws
Q16 QUESTION 16 OF 214
Which of the three different files storing data and logs in SQL servers is the starting point of a database and points to
other files in the database?
CORRECT ANSWER
MDF
Page 4
P R O F E S S I O N A L P R A C T I C E M AT E R I A L S
WGU C702 Cybersecurity and
Information Assurance
Questions & Answers 2026-
2027 | CHFI & Objective
Assessment
Verified Answers Exam Ready With Rationales
214 QUESTIONS
DOCUMENT OVERVIEW
This document contains 214 questions with correct answers provided, focusing on cybersecurity and
information assurance. It encompasses key concepts and principles relevant to the field, ensuring a
comprehensive review of computer forensics and cybercrime investigation. Learners can utilize this
resource for effective study, thorough review, and preparation for certification exams in cybersecurity.
CONTENTS
• Computer Forensics Basics • Investigation Methodologies
• Cybercrime Fundamentals • Legal Aspects of Forensics
• Expert Testimony and Ethics • Data Storage and File Systems
• Operating System Forensics • Data Recovery Tools
• Network Security and Attacks • Web Application Security
• Cloud Computing Forensics • Email Forensics
• Mobile Device Forensics
Page 1
, E XA M Q U EST I O N S
Q1 QUESTION 1 OF 214
Which of the following is true regarding computer forensics?
CORRECT ANSWER
Computer forensics deals with the process of finding evidence related to a digital crime to find the culprits and initiate legal
action against them.
Q2 QUESTION 2 OF 214
Which of the following is NOT a objective of computer forensics?
CORRECT ANSWER
Document vulnerabilities allowing further loss of intellectual property, finances, and reputation during an attack.
Q3 QUESTION 3 OF 214
Forensic readiness refers to:
CORRECT ANSWER
An organization's ability to make optimal use of digital evidence in a limited time period and with minimal investigation
costs.
Q4 QUESTION 4 OF 214
Which of the following is true of cybercrimes?
CORRECT ANSWER
The initial reporting of the evidence is usually informal.
Q5 QUESTION 5 OF 214
Computer Forensics deals with the process of finding _____ related to a digital crime to find the culprits and initiate
legal action against them.
CORRECT ANSWER
Evidence.
Page 2
, Q6 QUESTION 6 OF 214
Minimizing the tangible and intangible losses to the organization or an individual is considered an essential computer
forensics use.
CORRECT ANSWER
True.
Q7 QUESTION 7 OF 214
Which of the following is NOT part of the Computer Forensics Investigation Methodology?
CORRECT ANSWER
Testify as an expert defendant.
Q8 QUESTION 8 OF 214
Which of the following is NOT part of the Computer Forensics Investigation Methodology?
CORRECT ANSWER
Destroy the evidence.
Q9 QUESTION 9 OF 214
Identify the following which was launched by the National Institute of Standards and Technology (NIST), that
establishes a "methodology for testing computer forensics software tools by development of general tool
specifications, test procedures, test criteria, test sets, and test hardware."
CORRECT ANSWER
Computer Forensic Tool Testing Project (CFTTP)
Q10 QUESTION 10 OF 214
What is a machine readable language used in major digital operations, such as sending and receiving emails?
CORRECT ANSWER
ASCII
Q11 QUESTION 11 OF 214
Forensic data duplication involves the creation of a file that has every bit of information from the source in a raw bit-
stream format.
Page 3
, CORRECT ANSWER
True.
Q12 QUESTION 12 OF 214
What is NOT a command used to determine open files
CORRECT ANSWER
Open files
Q13 QUESTION 13 OF 214
Investigators can use Linux commands to gather necessary information from the system. Identify the following shell
command that is used to display the kernel ring buffer or information about device drivers loaded into the kernel.
CORRECT ANSWER
dmesg
Q14 QUESTION 14 OF 214
What is a proprietary information security standard for organizations that handle cardholder information for major
debit, credit, prepaid, e-purse, ATM, and POS cards?
CORRECT ANSWER
PCI DSS
Q15 QUESTION 15 OF 214
Which web application threat occurs when attackers insert malicious code, commands, or scripts into the input gates
of web applications, enabling the applications to interpret and run the newly supplied malicious input?
CORRECT ANSWER
Injection flaws
Q16 QUESTION 16 OF 214
Which of the three different files storing data and logs in SQL servers is the starting point of a database and points to
other files in the database?
CORRECT ANSWER
MDF
Page 4
