COMPUTER FORENSICS MIDTERM - ITN 276 questions with correct answers

What term is used to describe information that forensic specialists use to support or interpret real or documentary evidence; for example, to demonstrate that the fingerprints found on a keyboard are those of a specific individual Answer testimonial evidence Before you can do any forensic analysis or examination, you have to do what Answer Collect the evidence The netstat command will produce you Answer a list of all network connections your computer is making the INFO 2 file in a Windows system Answer contains the original name and location of a file placed in the Recycle Bin Objective of Computer Forensics is Answer Recover, analyze, and present findings a Hex Editor ... Answer - is a tool that displays the raw content of a file - Can be used to edit the raw file - Can be used to find hidden content translates the binary content of the file to Hexadecimal What is NOT True regarding Magnetic drives? Answer are Faster than Solid State Drives The command :