Exam (elaborations)
D431 DIGITAL FORENSICS IN CYBERSECURITY
- Course
- Institution
D431 DIGITAL FORENSICS IN CYBERSECURITY
[Show more]
Content preview
D431 DIGITAL FORENSICS IN CYBERSECURITYWhich law requires both parties to consent to the recording of a conversation? -
Answers -ECPA (Electronic Communications Privacy Act)
Which law is related to the disclosure of personally identifiable protected health
information (PHI)? - Answers -Health Insurance Portability and Accountability Act
(HIPAA)
Which U.S. law criminalizes the act of knowingly using a misleading domain name with
the intent to deceive a minor into viewing harmful material? - Answers -18 U.S.C. 2252B
Which U.S. law protects journalists from turning over their work or sources to law
enforcement before the information is shared with the public? - Answers -The Privacy
Protection Act (PPA)
A cyber security organization has issued a warning about a cybercriminal who is using a
known vulnerability to attack unpatched corporate Macintosh systems. A network
administrator decides to examine the software updates logs on a Macintosh system to
ensure the system has been patched. Which folder contains the software updates logs?
- Answers -/Library/Receipts
A forensic investigator wants to image an older BlackBerry smartphone running OS 7.0.
Which tool should the investigator use? - Answers -BlackBerry Desktop Manager
An investigator wants to extract information from a mobile device by connecting it to a
computer. What should the investigator take great care to ensure? - Answers -That the
mobile device does not synchronize with the computer
Which state is a device in if it is powered on, performing tasks, and able to be
manipulated by the user? - Answers -Active
The chief information officer of an accounting firm believes sensitive data is being
exposed on the local network. Which tool should the IT staff use to gather digital
evidence about this security vulnerability? - Answers -Sniffer
A police detective investigating a threat traces the source to a house. The couple at the
house shows the detective the only computer the family owns, which is in their son's
bedroom. The couple states that their son is presently in class at a local middle school.
How should the detective legally gain access to the computer? - Answers -Obtain
consent to search from the parents
How should a forensic scientist obtain the network configuration from a Windows PC
before seizing it from a crime scene? - Answers -By using the ipconfig command from a
command prompt on the computer
, The human resources manager of a small accounting firm believes he may have been a
victim of a phishing scam. The manager clicked on a link in an email message that
asked him to verify the logon credentials for the firm's online bank account. Which digital
evidence should a forensic investigator collect to investigate this incident? - Answers -
Browser Cache
After a company's single-purpose, dedicated messaging server is hacked by a
cybercriminal, a forensics expert is hired to investigate the crime and collect
evidence.Which digital evidence should be collected? - Answers -Firewall Logs
Thomas received an email stating that he needed to follow a link and verify his bank
account information to ensure it was secure. Shortly after following the instructions,
Thomas noticed money was missing from his account. Which digital evidence should be
considered to determine how Thomas' account information was compromised? -
Answers -Email messages
The chief executive officer (CEO) of a small computer company has identified a
potential hacking attack from an outside competitor. Which type of evidence should a
forensics investigator use to identify the source of the hack? - Answers -Network
transaction logs
A forensic scientist arrives at a crime scene to begin collecting evidence. What is the
first thing the forensic scientist should do? - Answers -Photograph all evidence in its
original place
Which method of copying digital evidence ensures proper evidence collection? -
Answers -Make the copy at the bit-level
A computer involved in a crime is infected with malware. The computer is on and
connected to the company's network. The forensic investigator arrives at the scene.
Which action should be the investigator's first step? - Answers -Unplug the computer's
Ethernet cable.
Which law or guideline lists the four states a mobile device can be in when data is
extracted from it? - Answers -NIST SP 800-72 Guidelines
Which law includes a provision permitting the wiretapping of VoIP calls? - Answers -
Communications Assistance to Law Enforcement Act (CALEA)
Which policy is included in the CAN-SPAM Act? - Answers -The email sender must
provide some mechanism whereby the receiver can opt out of future emails and that
method cannot require the receiver to pay in order to opt out.
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller GEEKA. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $10.99. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
76449 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now