A system administrator believes an employee is leaking information to a competitor by hiding confidential data in images being attached to outgoing emails. The administrator has captured the outgoing emails. Which tool should the forensic investigator use to search for the hidden data in the images...
WGU D431 Pre-Assessment Test 50 Questions and Answers 2024 Graded A+
Which law requires both parties to consent to the recording of a conversation? - ECPA (Electronic Communications Privacy Act)
Which law is related to the disclosure of personally identifiable protected health information (PHI)? - Health Insurance Portability and Accountability Act (HIPAA)
Which U.S. law criminalizes the act of knowingly using a misleading domain name with the intent to deceive a minor into viewing harmful material? - 18 U.S.C. 2252B
Which U.S. law protects journalists from turning over their work or sources to law enforcement before the information is shared with the public? - The Privacy Protection Act (PPA)
Which law or guideline lists the four states a mobile device can be in when data is extracted from it? -
NIST SP 800-72 Guidelines
Which law includes a provision permitting the wiretapping of VoIP calls? - Communications Assistance to Law Enforcement Act (CALEA)
Which policy is included in the CAN-SPAM Act? - The email sender must provide some mechanism whereby the receiver can opt out of future emails and that method cannot require the receiver to pay in order to opt out.
Which United States law requires telecommunications equipment manufacturers to provide built-in surveillance capabilities for federal agencies? - Communication Assistance to Law Enforcement Act (CALEA)
Which law requires a search warrant or one of the recognized exceptions to the search warrant requirements for searching email messages on a computer? - The Fourth Amendment to the U.S. Constitution Where are local passwords stored for the Windows operating system? - SAM file in \Windows\
System32\
Where on a Windows system is the config folder located that contains the SAM file? - C:\Windows\
System32
A forensic examiner wants to try to extract passwords for wireless networks to which a system was connected. Where should passwords for wireless networks be stored on a Windows XP system? - Registry
Which Windows password cracking tool uses rainbow tables? - Ophcrack
How does a rainbow table work to crack a password? - It uses a table of all possible keyboard combinations and their hash values, then searches for a match.
What should a forensic investigator use to gather the most reliable routing information for tracking an email message? - Email header
Which activity involves email tracing? - Determining the ownership of the source email server
A forensic examiner reviews a laptop running OS X which has been compromised. The examiner wants to
know if there were any mounted volumes created from USB drives. Which digital evidence should be reviewed? - /var/log
Which log or folder contains information about printed documents on a computer running Mac OS X? - /var/spool/cups
Which Windows event log should be checked for evidence of invalid logon attempts? - Security
A cyber security organization has issued a warning about a cybercriminal who is using a known vulnerability to attack unpatched corporate Macintosh systems. A network administrator decides to examine the software updates logs on a Macintosh system to ensure the system has been patched.
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Ascorers. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $9.49. You're not tied to anything after your purchase.
