Exam (elaborations)

Computer Forensics Chapter 1 UPDATED ACTUAL Questions and CORRECT Answers

0 purchase

Course
Computer Forensics

Institution
Computer Forensics

[Show more]

Preview 2 out of 7 pages

View example

Uploaded on October 30, 2024
Number of pages 7
Written in 2024/2025
Type Exam (elaborations)
Contains Questions & answers

computer forensics
computer forensics chapter 1

Institution Computer Forensics
Course Computer Forensics

MGRADES Member since 1 year 258 documents sold

$10.49

Add to cart

Add to wishlist

100% satisfaction guarantee
Immediately available after payment
Both online and in PDF
No strings attached

Computer Forensics Chapter 1 UPDATED
ACTUAL Questions and CORRECT
Answers
The American Heritage Dictionary defines __________as "the use of science and technology to
investigate and establish facts in criminal or civil courts of law." - CORRECT ANSWER -
forensics

Generally, __________ is considered to be the use of analytical and investigative techniques to
identify, collect, examine, and preserve evidence or information that is magnetically stored or
encoded. - CORRECT ANSWER - computer forensics

Computer forensics begins with a thorough understanding of what? - CORRECT
ANSWER - computer hardware

The term that is given to testimony taken from a witness or party to a case before a trial is known
as what? - CORRECT ANSWER - deposition

Before you can do any forensic analysis or examination, you have to do what? - CORRECT
ANSWER - collect the evidence

The real difference between a mediocre investigator and a star investigator is the __________. -
CORRECT ANSWER - evidence analysis

__________is information that has been processed and assembled to be relevant to an
investigation, and that supports a specific finding or determination. - CORRECT
ANSWER - Digital evidence

The __________is the continuity of control of evidence that makes it possible to account for all
that has happened to evidence between its original collection and its appearance in court,
preferably unaltered. - CORRECT ANSWER - chain of custody

, __________is data stored as written matter, on paper or in electronic files. - CORRECT
ANSWER - Documentary evidence

__________is information that helps explain other evidence. - CORRECT ANSWER -
Demonstrative evidence

Data about information, such as disk partition structures, and file tables, is called what? -
CORRECT ANSWER - metadata

The process of examining malicious computer code is known as __________. - CORRECT
ANSWER - software forensics

One must be able to show the whereabouts and custody of the evidence, how it was handled and
stored and by whom, from the time the evidence is first seized by a law enforcement officer or
civilian investigator until the moment it is shown in court. This is referred to as what? -
CORRECT ANSWER - chain of custody

Which of the following correctly shows how the instructions in a computer's BIOS are stored? -
CORRECT ANSWER - (EEPROM)

The most common computer hard drives today are __________. - CORRECT ANSWER -
(SATA)

Which of the following options is a common standard file format for executables, object code,
and shared libraries for UNIX-based systems? - CORRECT ANSWER - ELF

Which of the following was the first file system created specifically for Linux? - CORRECT
ANSWER - Extended File System

The benefits of buying summaries with Stuvia:

Guaranteed quality through customer reviews

Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.

Quick and easy check-out

You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.

Focus on what matters

Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!

Frequently asked questions

What do I get when I buy this document?

You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.

Satisfaction guarantee: how does it work?

Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.

Who am I buying these notes from?

Stuvia is a marketplace, so you are not buying this document from us, but from seller MGRADES. Stuvia facilitates payment to the seller.

Will I be stuck with a subscription?

No, you only buy these notes for $10.49. You're not tied to anything after your purchase.

Can Stuvia be trusted?

4.6 stars on Google & Trustpilot (+1000 reviews)

67418 documents were sold in the last 30 days

Founded in 2010, the go-to place to buy study notes for 15 years now

Start selling

Seller

Other ·

Exam (elaborations)

Computer Forensics Chapter 1 UPDATED ACTUAL Questions and CORRECT Answers

Document information

Subjects

Written for