stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Digital Forensics Flashcards | StudBud
Explore
/
Digital Forensics
Digital Forensics
15 terms
·
StudBud Administration
·
54 plays
Imported from external platform
Flashcards
15 cards
F
Practice quiz
P
Host live
L
Questions
15
Answers
1
What is the purpose of a "dirty word" lists in a string and keyword search?
to see if the owner of the device was involved in anything "dirty"
to check for illegal sites on the device
to search for possible words or strings associated with your investigation
2
Which of the following is an example of
volatile memory
?
Random Access Memory (RAM)
A physical storage device (hard drive, etc.)
All of the above
3
A computer can be a
tool
witness
victim
all the above
4
Hash values are used to verify the integrity of digital evidence.
False
True
5
What is the primary goal of digital forensics?
To develop software applications
To recover and investigate material found in digital devices
To create new cybersecurity tools
To prevent cyber attacks
6
The
first step
in the digital forensics methodology is
Timeline analysis
Evidence acquisition
Media analysis
Verification of occurrence of an incident
7
Which tool is widely used for disk imaging in digital forensics?
Metasploit
Wireshark
Nmap
FTK Imager
8
What is steganography in the context of digital forensics?
To protect software
To reveal data
To hide data within other files, such as images or audio
A tool to write on a computer
9
What device is used to ensure you don't alter the data on the original storage device when making a copy of it?
write blocker
crypto blocker
hash blocker
read blocker
10
Once data is deleted, it is always permanently lost.
False
True
11
What source(s) can be accessed to help build the timeline of events?
metadata
All of the above
system logs
12
What account usage information is useful when conducting digital forensic analysis?
Password Changes
Failed Logins
All the above
Last log in
13
When will you want to involve law enforcement in a forensic investigation?
All of the above
When a law might have been broken
When considering taking administrative action against an employee
14
What does the term “chain of custody” refer to in digital forensics?
The encryption method used
The password used to access a device
The sequence of custody, control, transfer, and analysis of evidence
The type of file system used
15
Digital forensics can only be applied to computers.
False
True
