CFA-001 試験問題を無料オンラインアクセス

Computer forensics report provides detailed information on complete computer forensics investigation process. It should explain how the incident occurred, provide technical details of the incident and should be clear to understand. Which of the following attributes of a forensics report can render it inadmissible in a court of law?

• A.It includes metadata about the incident
• B.It maintains a single document style throughout the text
• C.It is based on logical assumptions about the incident timeline
• D.It includes relevant extracts referred to In the report that support analysis or conclusions

If the partition size Is 4 GB, each cluster will be 32 K. Even If a file needs only 10 K, the entire 32 K will be allocated, resulting In 22 K of___________.

• A.Deleted space
• B.Slack space
• C.Cluster space
• D.Sector space

Data compression involves encoding the data to take up less storage space and less bandwidth for transmission. It helps in saving cost and high data manipulation in many business applications.
Which data compression technique maintains data integrity?

• A.Speech encoding compression
• B.Lossless compression
• C.Lossy video compression
• D.Lossy compression

What is a bit-stream copy?

• A.A bit-stream image is the file that contains the FAT32 files and folders of all the data on a disk or partition
• B.A bit-stream image is the file that contains the NTFS files and folders of all the data on a disk or partition
• C.Creating a bit-stream image transfers only non-deleted files from the original disk to the image disk
• D.Bit-Stream Copy is a bit-by-bit copy of the original storage medium and exact copy of the original disk

What is a chain of custody?

• A.Chain of custody refers to obtaining preemptive court order to restrict further damage of evidence in electronic seizures
• B.It is a search warrant that is required for seizing evidence at a crime scene
• C.A legal document that demonstrates the progression of evidence as it travels from the original evidence location to the forensic laboratory
• D.It Is a document that lists chain of windows process events