Digital-Forensics-in-Cybersecurity 試験問題を無料オンラインアクセス

What are the three basic tasks that a systems forensic specialist must keep in mind when handling evidence during a cybercrime investigation?

• A.Preserve evidence, encrypt evidence, and delete evidence
• B.Analyze evidence, prepare evidence, and document evidence
• C.Find evidence, preserve evidence, and prepare evidence
• D.Find evidence, analyze evidence, and prosecute evidence

A digital forensic examiner receives a computer used in a hacking case. The examiner is asked to extract information from the computer's Registry.
How should the examiner proceed when obtaining the requested digital evidence?

• A.Enlist a colleague to witness the investigative process
• B.Investigate whether the computer was properly seized
• C.Ensure that any tools and techniques used are widely accepted
• D.Download a tool from a hacking website to extract the data

Which method of copying digital evidence ensures proper evidence collection?

• A.Cloud backup
• B.Bit-level copy
• C.Encrypted transfer
• D.File-level copy

A forensic investigator needs to identify where email messages are stored on a Microsoft Exchange server.
Which file extension is used by Exchange email servers to store the mailbox database?

• A..edb
• B..mail
• C..db
• D..nsf

How should a forensic scientist obtain the network configuration from a Windows PC before seizing it from a crime scene?

• A.By rebooting the computer into safe mode
• B.By opening the Network and Sharing Center
• C.By using the ipconfig command from a command prompt on the computer
• D.By checking the system properties