- (Exam Topic 1)
What is the following command trying to accomplish?
Correct Answer:
A
- (Exam Topic 2)
When searching through file headers for picture file formats, what should be searched to find a JPEG file in hexadecimal format?
Correct Answer:
A
- (Exam Topic 1)
You are working as an independent computer forensics investigator and received a call from a systems administrator for a local school system requesting your assistance. One of the students at the local high school is suspected of downloading inappropriate images from the Internet to a PC in the Computer lab. When you arrive at the school, the systems administrator hands you a hard drive and tells you that he made a “simple backup copy” of the hard drive in the PC and put it on this drive and requests that you examine that drive for evidence of the suspected images. You inform him that a “simple backup copy” will not provide deleted files or recover file fragments.
What type of copy do you need to make to ensure that the evidence found is complete and admissible in future proceeding?
Correct Answer:
C
- (Exam Topic 3)
Which of the following ISO standard defines file systems and protocol for exchanging data between optical disks?
Correct Answer:
A
- (Exam Topic 3)
Which command can provide the investigators with details of all the loaded modules on a Linux-based system?
Correct Answer:
B
