312-49v10 Free Practice Test

- (Exam Topic 1)
When you carve an image, recovering the image depends on which of the following skills?

1. A. Recognizing the pattern of the header content
2. B. Recovering the image from a tape backup
3. C. Recognizing the pattern of a corrupt file
4. D. Recovering the image from the tape backup

Correct Answer: A

- (Exam Topic 3)
What does Locard's Exchange Principle state?

1. A. Any information of probative value that is either stored or transmitted in a digital form
2. B. Digital evidence must have some characteristics to be disclosed in the court of law
3. C. Anyone or anything, entering a crime scene takes something of the scene with them, and leaves something of themselves behind when they leave
4. D. Forensic investigators face many challenges during forensics investigation of a digital crime, such as extracting, preserving, and analyzing the digital evidence

Correct Answer: C

- (Exam Topic 3)
Amber, a black hat hacker, has embedded malware into a small enticing advertisement and posted it on a popular ad-network that displays across various websites. What is she doing?

1. A. Malvertising
2. B. Compromising a legitimate site
3. C. Click-jacking
4. D. Spearphishing

Correct Answer: A

- (Exam Topic 1)
The efforts to obtain information before a trail by demanding documents, depositions, questioned and answers written under oath, written requests for admissions of fact and examination of the scene is a description of what legal term?

1. A. Detection
2. B. Hearsay
3. C. Spoliation
4. D. Discovery

Correct Answer: D

- (Exam Topic 1)
Which of the following file system is used by Mac OS X?

1. A. EFS
2. B. HFS+
3. C. EXT2
4. D. NFS

Correct Answer: B