CDS351 Final

____ is any software that can monitor activity on a computer. it can also have legal or illegal applications

There are four layers to iOS. The ————layer is the heart of the operating S.

When investigators change data on a target machine, they could potentially:

Maintaining ___ is a problem with live system forensics in which data is not acquired at a unified moment

What is NOT true of random access memory (RAM)?

The ____ is a memory chip inserted into a mobile phone that stores the International Mobile Subscriber Identity (IMSI).

The Caesar and Atbash ciphers are simple ___ ciphers

How can forensic investigators prove that evidence was not altered during the course of an investigation?

——————- was the first law meant to curtail unsolicited email. However, the law has many loopholes.

On a Mac, the ————- directory contains information about mounted devices.

Which of the following can be used for digital watermarking or hiding data within images.

What is the continuity of control of evidence that makes it possible to account for all that has happened to it?

because of the Daubert standers, it is;

Email programs use different email formats, depending on the operating system upon which they run.

How you will gather evidence and which tools are most appropriate for a specific investigation are part of

A type of targeted phishing attack in which the criminal targets specific group; for example, IT staff at a bank?

In iOS, the entire call history can be found in Library_CallHistory_call_history.db

The Windows Registry is organized into five sections referred to as ————-.

___ is the continuity of control of evidence that makes is possible to account for all that has happen

Files with pst extensions belong to which email client?

is an email server that strips identifying information from an email before forwarding it with the third-party mail.

When seizing evidence from a mobile device, it is important to make sure that the device synchronizes with your computer

Windows 2000 and newer Windows operating systems use the file system.

Which Linux distribution is highly popular with beginners?

You can install 32-bit programs on a 64-bit system.

The email ________ keeps a record ofthe message's journey as it travels through a communications network.

which of the fallowing is NOT a role that computers can play in a computer crime?

is a data structure in Linux file systems that store all the information about a file except its name and actual data

Maintaining ————- is a problem with live system forensics in which data is not acquired at a unified moment.

What is a formal document prepared by a forensics to document an investigation, including a list of all tests conducted?

Windows uses __ on each system as a "scratch pad" to write data when additional random access memory (RAM) is needed

Information about USB devices that have been connected to a Windows computer is stored the Windows Registry.

On a Windows computer, the ————- is ? special place on the hard drive where items from memory can be temporarily stored

use of ____ enables an investigator to reconstruct file fragments if files have been deleted or overwritten

The Linux ———— shell command makes a physical image of what is live in memory.

True or false, the netstat command shows network statistics and any current connections

Which of the following is NOT a mobile device state outlined by NIST?