stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Digital Forensics Flashcards | StudBud
Explore
/
Digital Forensics
Digital Forensics
15 terms
·
StudBud Administration
·
54 plays
Imported from external platform
Flashcards
15 cards
F
Practice quiz
P
Host live
L
Questions
15
Answers
1
What is the purpose of a "dirty word" lists in a string and keyword search?
to check for illegal sites on the device
to see if the owner of the device was involved in anything "dirty"
to search for possible words or strings associated with your investigation
2
The
first step
in the digital forensics methodology is
Timeline analysis
Evidence acquisition
Media analysis
Verification of occurrence of an incident
3
Hash values are used to verify the integrity of digital evidence.
False
True
4
When will you want to involve law enforcement in a forensic investigation?
All of the above
When considering taking administrative action against an employee
When a law might have been broken
5
Which tool is widely used for disk imaging in digital forensics?
Nmap
FTK Imager
Metasploit
Wireshark
6
What is the primary goal of digital forensics?
To prevent cyber attacks
To recover and investigate material found in digital devices
To develop software applications
To create new cybersecurity tools
7
Which of the following is an example of
volatile memory
?
Random Access Memory (RAM)
All of the above
A physical storage device (hard drive, etc.)
8
What source(s) can be accessed to help build the timeline of events?
system logs
All of the above
metadata
9
Once data is deleted, it is always permanently lost.
True
False
10
What does the term “chain of custody” refer to in digital forensics?
The type of file system used
The sequence of custody, control, transfer, and analysis of evidence
The encryption method used
The password used to access a device
11
A computer can be a
witness
tool
victim
all the above
12
Digital forensics can only be applied to computers.
False
True
13
What device is used to ensure you don't alter the data on the original storage device when making a copy of it?
write blocker
crypto blocker
hash blocker
read blocker
14
What account usage information is useful when conducting digital forensic analysis?
Password Changes
Last log in
Failed Logins
All the above
15
What is steganography in the context of digital forensics?
To hide data within other files, such as images or audio
To reveal data
To protect software
A tool to write on a computer
