CHFI - PRACTICE TEST 1 - OVERALL
Which Model or legislation applies to a holist approach toward any criminal activity as a
criminal operation? - Answers - Enterprise Theory of Investigation
A characteristic for an organization's forensic readiness. - Answers - Includes costs
considerations
Which step will an investigator duplicate an image the collected digital information? -
Answers - Acquiring Data Step
What is the last step of a criminal investigation with computer forensics? - Answers -
Testifying in court
How to verify if a Android device is on without interacting with the phone? - Answers -
Look for flashing lights
What should an government agent comply with when performing search and seizure? -
Answers - Fourth Amendment
What is the path for system logs on a Mac? - Answers - /var/log/
Which tool should an investigator use to view Linux kernel ring buffers? - Answers -
dmesg
What tool should be used to recover files from a reformatted Hard Drive? - Answers -
EaseUS Data Recovery
What is the initial hexadecimal value of a JPEG? - Answers - 0xFFD8
Type of steganography that allows a file to be physically moved but keeps associated
files in the original location. - Answers - Folder
Access to plaintext message and the image file, what method is this called? - Answers -
Known Message
Uses a plaintext message, various tools against that message trying to find the
algorithm used. - Answers - Chosen Message
What OS does the DaveGrohl password cracker work on? - Answers - OS X
What tool can be used to by a forensic investigator in Windows that does not rely on
Window's APIs? - Answers - EnCase
Which Model or legislation applies to a holist approach toward any criminal activity as a
criminal operation? - Answers - Enterprise Theory of Investigation
A characteristic for an organization's forensic readiness. - Answers - Includes costs
considerations
Which step will an investigator duplicate an image the collected digital information? -
Answers - Acquiring Data Step
What is the last step of a criminal investigation with computer forensics? - Answers -
Testifying in court
How to verify if a Android device is on without interacting with the phone? - Answers -
Look for flashing lights
What should an government agent comply with when performing search and seizure? -
Answers - Fourth Amendment
What is the path for system logs on a Mac? - Answers - /var/log/
Which tool should an investigator use to view Linux kernel ring buffers? - Answers -
dmesg
What tool should be used to recover files from a reformatted Hard Drive? - Answers -
EaseUS Data Recovery
What is the initial hexadecimal value of a JPEG? - Answers - 0xFFD8
Type of steganography that allows a file to be physically moved but keeps associated
files in the original location. - Answers - Folder
Access to plaintext message and the image file, what method is this called? - Answers -
Known Message
Uses a plaintext message, various tools against that message trying to find the
algorithm used. - Answers - Chosen Message
What OS does the DaveGrohl password cracker work on? - Answers - OS X
What tool can be used to by a forensic investigator in Windows that does not rely on
Window's APIs? - Answers - EnCase
