WGUlD431lObjectivelAssessmentlGuidel (LatestlUpdate)lDigitallForensicslinl Cybersecurity|lQsl&lAs|lGradelAl100%l Correctl(VerifiedlAnswers)
Q:lThomaslreceivedlanlemaillstatinglthatlhelneededltolfollowlallinklandlverifylhislbanklaccou ntlinformationltolensurelitlwaslsecure.lShortlylafterlfollowinglthelinstructions,lThomaslnoticedl moneylwaslmissinglfromlhislaccount.lWhichldigitallevidencelshouldlbelconsideredltoldetermine lhowlThomas'laccountlinformationlwaslcompromised?
Answer:
Emaillmessages.
Q:lThelchieflexecutivelofficerl(CEO)loflalsmalllcomputerlcompanylhaslidentifiedlalpotentiall hackinglattacklfromlanloutsidelcompetitor.lWhichltypeloflevidencelshouldlalforensicslinvestigat orluseltolidentifylthelsourceloflthelhack?
Answer:
Networkltransactionllogs.
Q:lAlforensiclscientistlarriveslatlalcrimelsceneltolbeginlcollectinglevidence.lWhatlislthelfirstlt hinglthelforensiclscientistlshouldldo?
Answer:
Photographlalllevidencelinlitsloriginallplace.
- / 4
Q:lWhichlmethodloflcopyingldigitallevidencelensureslproperlevidencelcollection?
Answer:
Makelthelcopylatlthelbit-level.
Q:lAlcomputerlinvolvedlinlalcrimelislinfectedlwithlmalware.lThelcomputerlislonlandlconnecte dltolthelcompany'slnetwork.lThelforensiclinvestigatorlarriveslatlthelscene.lWhichlactionlshouldl belthelinvestigator'slfirstlstep?
Answer:
Unpluglthelcomputer'slEthernetlcable.
Q:lWhatlarelthelthreelbasicltaskslthatlalsystemslforensiclspecialistlmustlkeeplinlmindlwhenlha ndlinglevidencelduringlalcybercrimelinvestigation?Answerloptionslmaylbelusedlmorelthanlonce lorlnotlatlall.lSelectlyourlanswerslfromlthelpull-downllist.
Answer:
Find,lpreserve,lprepare.
Q:lHowldolforensiclspecialistslshowlthatldigitallevidencelwaslhandledlinlalprotected,lsecurel mannerlduringlthelprocessloflcollectinglandlanalyzinglthelevidence?
Answer:
Chainloflcustody
Q:lWhichlcharacteristiclappliesltolmagneticldriveslcomparedltolsolid-stateldrivesl(SSDs)?
Answer: 2 / 4
Lowerlcost.
Q:lWhichlcharacteristiclappliesltolsolid-stateldrivesl(SSDs)lcomparedltolmagneticldrives?
Answer:
Theylarellesslsusceptibleltoldamage.
Q:lWhichltypeloflstoragelformatlshouldlbeltransportedlinlalspeciallbagltolreducelelectrostaticl interference?
Answer:
Magneticlmedia
Q:lWhichlWindowslcomponentlislresponsiblelforlreadinglthelboot.inilfilelandldisplayinglthelb ootlloaderlmenulonlWindowslXPlduringlthelbootlprocess?
Answer:
NTLDR
Q:lThelfollowingllineloflcodelislanlexampleloflhowltolmakelalforensiclcopyloflalsuspectldriv
e:lddlif=/dev/memlof=/evidence/image.memory1l
Whichloperatinglsystemlshouldlbelusedltolrunlthislcommand?
Answer:
Linux
Q:lWhichlfilelsystemlislsupportedlbylMac? 3 / 4
Answer:
HierarchicallFilelSystemlPlusl(HFS+)
Q:lWherelarellocallpasswordslstoredlforlthelWindowsloperatinglsystem?
Answer:
SAMlfilelinl\Windows\System32\
Q:lWherelonlalWindowslsystemlislthelconfiglfolderllocatedlthatlcontainslthelSAMlfile?
Answer:
C:\Windows\System32
Q:lAlforensiclexaminerlwantsltoltryltolextractlpasswordslforlwirelesslnetworksltolwhichlalsys temlwaslconnected.lWherelshouldlpasswordslforlwirelesslnetworkslbelstoredlonlalWindowslXP lsystem?
Answer:
Registry
Q:lWhichlWindowslpasswordlcrackingltoolluseslrainbowltables?
Answer:
Ophcrack
- / 4