stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Forensic Terms Flashcards | StudBud
Explore
/
Forensic Terms
Forensic Terms
28 terms
·
StudBud Administration
·
7 plays
Imported from external platform
Flashcards
28 cards
F
Practice quiz
P
Host live
L
Questions
28
Answers
1
What does a hexadecimal editor allow investigators to do?
Detect privilege escalation attacks
Analyze network traffic in real time
Examine and modify binary data in files
Encrypt and decrypt forensic images
2
Steganography involves hiding messages within other non-secret data.
False
True
3
Which forensic method helps determine when and how a system was accessed?
Wireless Forensics
Rootkit Detection
Incident Response
Log File Analysis
4
Which forensic method creates a bit-by-bit copy of storage media?
RAM Analysis
Packet Sniffing
File Carving
Bitstream Imaging
5
What type of forensics is most useful for investigating online posts and messages?
Mobile Forensics
Cloud Forensics
Social Media Forensics
Internet History Analysis
6
Which type of forensics focuses on analyzing Wi-Fi and Bluetooth traffic?
Social Media Forensics
USB Forensics
Cloud Forensics
Wireless Forensics
7
Which process ensures that digital evidence remains legally admissible?
Cold Boot Attack
Chain of Custody
Privilege Escalation
Secure Deletion
8
Rootkit detection is the process of hiding malware on a system.
False
True
9
Which type of forensics focuses on investigating cloud storage and services?
Network Forensics
Cloud Forensics
Software Forensics
Mobile Forensics
10
What is the main purpose of forensic imaging?
To create an exact, bit-by-bit copy of a drive for investigation
To analyze volatile memory in real-time
To scan for malware in software applications
To examine metadata in digital documents
11
File carving can recover files even without file system metadata.
True
False
12
What is the purpose of a hash value in digital forensics?
To verify the integrity of data
To compress files for storage
To recover lost passwords
To encrypt data for security
13
What does packet sniffing allow an investigator to do?
Encrypt sensitive forensic data
Recover deleted files
Detect unauthorized USB devices
Capture and analyze network traffic
14
What does a write blocker do?
Encrypts data for secure storage
Blocks writing to an evidence drive to maintain integrity
Prevents unauthorized network access
Recovers deleted files from storage devices
15
Which attack method exploits software vulnerabilities before a patch is released?
Cold Boot Attack
Privilege Escalation
Zero-Day Exploit
Steganography
16
What does e-Discovery focus on?
Identifying vulnerabilities in cloud systems
Recovering deleted emails
Collecting and analyzing digital data for legal cases
Detecting social media threats
17
Live forensics requires shutting down the system before data collection.
True
False
18
Which forensic tool is a digital forensics platform and GUI for The Sleuth Kit?
Autopsy
Hex Editor
FTK
Wireshark
19
What is the purpose of log file analysis in digital forensics?
Examining system logs for suspicious activity
Encrypting log files for security
Recovering deleted log files
Hiding forensic artifacts from attackers
20
Data exfiltration refers to the unauthorized transfer of data from a system
False
True
21
Which of these tools is specifically used for forensic analysis of Windows Registry?
FTK
Registry Analysis
Wireshark
Autopsy
22
What is the primary goal of digital forensics?
Preventing cyberattacks
Collecting, analyzing, and reporting digital evidence legally
Encrypting sensitive information
Protecting personal privacy
23
Which forensic technique involves extracting hidden information from files?
Hexadecimal Editing
Rootkit Detection
Steganography
File Carving
24
Which forensic process helps reconstruct the sequence of events on a system?
Log File Analysis
Data Recovery
Timeline Analysis
Registry Analysis
25
What is the main goal of secure deletion?
To recover lost data from an SSD
To permanently erase data so it cannot be recovered
To analyze deleted files
To encrypt forensic evidence
26
Which forensic tool consists of command-line utilities for forensic analysis?
Wireshark
The Sleuth Kit (TSK)
Autopsy
Forensic Toolkit (FTK)
27
Which of the following is an example of volatile data?
A browser cache file
A password stored in a database
RAM contents
A deleted file on a USB drive
28
What is the main purpose of malware analysis in digital forensics?
To recover deleted system logs
To understand the behavior of malicious software
To scan for vulnerabilities in encrypted files
To hide sensitive information from attackers
