WGU D431 DIGITAL FORENSICS

• | P a g e

WGU D431 DIGITAL FORENSICS

OBJECTIVE ASSESSMENT NEWEST 2024 -

2025 ACTUAL EXAM COMPLETE 200

QUESTIONS AND CORRECT DETAILED

ANSWERS (VERIFIE ANSWERS) |ALREADY

GRADED A+||BRAND NEW!!

A system administrator believes data are being leaked from the organization. The administrator decides to use steganography to hide tracking information in the types of files he thinks are being leaked.

Which steganographic term describes this tracking information?

• Payload
• Carrier
• Channel
• Audit - ANSWER- A. Payload
• / 4

• | P a g e

A criminal organization has compromised a third-party web server and is using it to control a botnet. The botnet server hides command and control messages through the DNS protocol.

Which steganographic component are the command and control messages?

• Payload
• Carrier
• Channel
• Dead drop - ANSWER- A. Payload

Which method is commonly used to hide data via steganography?

A. LSB

B. AES

C. DES

D. RSA - ANSWER- A. LSB

After a company's single-purpose, dedicated messaging server is hacked by a cybercriminal, a forensics expert is hired to investigate the crime and collect evidence. 2 / 4

• | P a g e

Which digital evidence should be collected?

• Firewall logs
• Workstation logs
• Phishing emails
• Spam messages - ANSWER- A. Firewall logs

A forensic scientist arrives at a crime scene to begin collecting evidence.

What is the first thing the forensic scientist should do?

• Photograph all evidence in its original place
• Unplug all network connections so data cannot be deleted

remotely

• Turn off the power to the entire area being examined
• Gather up all physical evidence and move it out as quickly as

possible - ANSWER- A. Photograph all evidence in its original place

• / 4

• | P a g e

Which method of copying digital evidence ensures proper evidence collection?

• Make the copy at the bit-level
• Copy files using drag and drop
• Make the copy using file transfer
• Copy the logical partitions - ANSWER- A. Make the copy at

the bit-level

Which type of storage format should be transported in a special bag to reduce electrostatic interference?

• Solid-state drives
• Optical media
• Digital audio tapes
• Magnetic media - ANSWER- A. Solid-state drives

Which Windows component is responsible for reading the boot.ini file and displaying the boot loader menu on Windows XP during the boot process?

• NTLDR
• / 4