Exam (elaborations)
DIGITAL FORENSICS IN CYBERSECURITY C840 QUESTIONS AND ANSWERS
- Course
- Institution
DIGITAL FORENSICS IN CYBERSECURITY C840 QUESTIONS AND ANSWERS
[Show more]
Content preview
1-350 of 350Stores file locations by sector in a file called the file allocation table. This table
contains information about which clusters are being used by which particular files and
which clusters are free to be used.
Give this one a try later!
FAT
,A simple DOS copy will not include deleted files, file slack, and other information. A
disk-imaging tool is highly recommended to create an evidence copy of a disk. A
simple DOS copy will not include deleted files, file slack, and other information that a
disk-imaging tool will.
Give this one a try later!
Bob was asked to make a copy of all the evidence from the compromised
system. Melanie did a DOS copy of all the files on the system. What would
be the primary reason for you to recommend for or against using a disk-
imaging tool?
Use those techniques after logical damage, not physical.
Give this one a try later!
Consistency checking and zero-knowledge analysis are used for?
can be used to see the Linux boot messages. This can be invaluable information to a
forensic investigation. You can use the dmesg command to view all the messages that
were displayed during the boot process. When your system boots up, you see a lot of
information telling you what processes are starting, what processes failed, what
hardware is being initialized, and more. This can be invaluable information to a
forensic investigation. You can use the dmesg command to view all the messages that
were displayed during the boot process.
Give this one a try later!
dmesg
,A compatible system that is functional.
Give this one a try later!
Test system
Journaling. Journaling is basically the process whereby the file system keeps a record
of what file transactions take place so that in the event of a hard drive crash, the files
can be recovered. Journaling file systems are fault tolerant because the file system
logs all changes to files, directories, or file structures.
Give this one a try later!
__________ is the process whereby the file system keeps a record of what file
transactions take place so that in the event of a hard drive crash, the files
can be recovered.
any attempt to gain financial reward through deception is fraud
Give this one a try later!
Fraud
Disguising the meaning of information.
Give this one a try later!
, Data transformation
was designed to protect persons 18 years of age and under from downloading or
viewing material considered indecent. This act has been subject to court cases that
subsequently changed some definitions and penalties.
Give this one a try later!
The Communications Decency Act of 1996
Communications Assistance to Law Enforcement Act (CALEA)
Give this one a try later!
Which law includes a provision permitting the wiretapping of VoIP calls?
Communications Assistance to Law Enforcement Act (CALEA)
USA Patriot Act
Electronic Communications Privacy Act (ECPA)
Sarbanes-Oxley Act (SOX)
or carrier file is the signal, stream, or file in which the payload is hidden.
Give this one a try later!
(Steganography) Carrier
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller selftest. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $9.00. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
75323 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now