Cyber Security – CHFI with 100% Correct
Answers 100% Solved
First responders should not - ✔✔Prosecute a suspect
When acquiring electronic evidence at scene of crime it is best not to: - ✔✔shut down the
computer
First response to an incident may not be a forensics expert. Of the people listed here which is
best capable of collecting, preserving, and packaging electronic evidence? - ✔✔Forensic staff
Forensic laboratory imaging system will have these qualities - ✔✔very low image capture rate
When building a forensic lab health and safety factors are critical because? - ✔✔This is to
protect the staff
Tracks numbering on a hard disk begins at 0, typically reaching a value of .-
✔✔1023
If the partition size Is 4 GB, each cluster will be 32 K. Even If a file needs only 10 K, the entire
32 K will be allocated, resulting In 22 K of . - ✔✔Slack space
If a file is 2575 bytes, what is it's size in sectors? - ✔✔6
The first step in preparing a computer for forensics investigation is: - ✔✔Do not turn the
computer off or on, run any programs, or attempt to access data on a computer
The goal of forensic science is: - ✔✔To determine the evidential value of the crime scene and
related evidence
Computer forensics is: - ✔✔Science of capturing, processing, and investigating computer
security incidents and making it acceptable to a court of law.
, The role of the forensic investigator is to: - ✔✔Create an image backup of the original evidence
without tampering with potential evidence
What is the first step to be carried out in an investigation of a computer crime? - ✔✔Obtain a
search warrant
When would you conduct searches without a warrant? - ✔✔When destruction of evidence is
imminent
What is the "Best Evidence Rule"? - ✔✔The court only allows the original evidence of a
document, photograph, or recording at the trial rather than a copy
What law is related to fraud and related activity in connection with computers? - ✔✔18 USC
1030
When is a checksum performed on the evidence? - ✔✔while you acquire the data
Answers 100% Solved
First responders should not - ✔✔Prosecute a suspect
When acquiring electronic evidence at scene of crime it is best not to: - ✔✔shut down the
computer
First response to an incident may not be a forensics expert. Of the people listed here which is
best capable of collecting, preserving, and packaging electronic evidence? - ✔✔Forensic staff
Forensic laboratory imaging system will have these qualities - ✔✔very low image capture rate
When building a forensic lab health and safety factors are critical because? - ✔✔This is to
protect the staff
Tracks numbering on a hard disk begins at 0, typically reaching a value of .-
✔✔1023
If the partition size Is 4 GB, each cluster will be 32 K. Even If a file needs only 10 K, the entire
32 K will be allocated, resulting In 22 K of . - ✔✔Slack space
If a file is 2575 bytes, what is it's size in sectors? - ✔✔6
The first step in preparing a computer for forensics investigation is: - ✔✔Do not turn the
computer off or on, run any programs, or attempt to access data on a computer
The goal of forensic science is: - ✔✔To determine the evidential value of the crime scene and
related evidence
Computer forensics is: - ✔✔Science of capturing, processing, and investigating computer
security incidents and making it acceptable to a court of law.
, The role of the forensic investigator is to: - ✔✔Create an image backup of the original evidence
without tampering with potential evidence
What is the first step to be carried out in an investigation of a computer crime? - ✔✔Obtain a
search warrant
When would you conduct searches without a warrant? - ✔✔When destruction of evidence is
imminent
What is the "Best Evidence Rule"? - ✔✔The court only allows the original evidence of a
document, photograph, or recording at the trial rather than a copy
What law is related to fraud and related activity in connection with computers? - ✔✔18 USC
1030
When is a checksum performed on the evidence? - ✔✔while you acquire the data
