WGU D431 DIGITAL FORENSICS IN
CYBERSECURITY TASK 2 DETAILED RESPONSE
FRAMEWORK
◉ A criminal organization has compromised a third-party web
server and is using it to control a botnet. The botnet server hides
command and control messages through the DNS protocol.
Which steganographic component are the command and control
messages?
A. Payload
B. Carrier
C. Channel
D. Dead drop.
Answer: A. Payload
◉ Which method is commonly used to hide data via steganography?
A. LSB
B. AES
C. DES
,D. RSA.
Answer: A. LSB
◉ After a company's single-purpose, dedicated messaging server is
hacked by a cybercriminal, a forensics expert is hired to investigate
the crime and collect evidence.
Which digital evidence should be collected?
A. Firewall logs
B. Workstation logs
C. Phishing emails
D. Spam messages.
Answer: A. Firewall logs
◉ A forensic scientist arrives at a crime scene to begin collecting
evidence.
What is the first thing the forensic scientist should do?
A. Photograph all evidence in its original place
B. Unplug all network connections so data cannot be deleted
remotely
, C. Turn off the power to the entire area being examined
D. Gather up all physical evidence and move it out as quickly as
possible.
Answer: A. Photograph all evidence in its original place
◉ Which method of copying digital evidence ensures proper
evidence collection?
A. Make the copy at the bit-level
B. Copy files using drag and drop
C. Make the copy using file transfer
D. Copy the logical partitions.
Answer: A. Make the copy at the bit-level
◉ Which type of storage format should be transported in a special
bag to reduce electrostatic interference?
A. Solid-state drives
B. Optical media
C. Digital audio tapes
D. Magnetic media.
Answer: A. Solid-state drives
CYBERSECURITY TASK 2 DETAILED RESPONSE
FRAMEWORK
◉ A criminal organization has compromised a third-party web
server and is using it to control a botnet. The botnet server hides
command and control messages through the DNS protocol.
Which steganographic component are the command and control
messages?
A. Payload
B. Carrier
C. Channel
D. Dead drop.
Answer: A. Payload
◉ Which method is commonly used to hide data via steganography?
A. LSB
B. AES
C. DES
,D. RSA.
Answer: A. LSB
◉ After a company's single-purpose, dedicated messaging server is
hacked by a cybercriminal, a forensics expert is hired to investigate
the crime and collect evidence.
Which digital evidence should be collected?
A. Firewall logs
B. Workstation logs
C. Phishing emails
D. Spam messages.
Answer: A. Firewall logs
◉ A forensic scientist arrives at a crime scene to begin collecting
evidence.
What is the first thing the forensic scientist should do?
A. Photograph all evidence in its original place
B. Unplug all network connections so data cannot be deleted
remotely
, C. Turn off the power to the entire area being examined
D. Gather up all physical evidence and move it out as quickly as
possible.
Answer: A. Photograph all evidence in its original place
◉ Which method of copying digital evidence ensures proper
evidence collection?
A. Make the copy at the bit-level
B. Copy files using drag and drop
C. Make the copy using file transfer
D. Copy the logical partitions.
Answer: A. Make the copy at the bit-level
◉ Which type of storage format should be transported in a special
bag to reduce electrostatic interference?
A. Solid-state drives
B. Optical media
C. Digital audio tapes
D. Magnetic media.
Answer: A. Solid-state drives
