WGU C840 Digital Forensics in Cybersecurity Final Exam (2023/ 2024 Update) Questions and Verified Answers| 100% Correct

WGU C840 Digital Forensics in Cybersecurity Final Exam (2023/ 2024 Update) Questions and Verified Answers| 100% Correct Q: If a camera is available and the computer is on Answer: Take pics of the screen, if its off take pics of the pc, the location, and any electronic media attached Q: The SAM file is found Answer: Windows/System32 directory Q: What contains every conceivable combination of keyboard characters under the rainbow and their associated hashed versions Answer: Rainbow table Q: What prohibits the use of telecommunications to annoy, abuse, threaten or harass anyone? Answer: Title 47 of U.S Code 223 Q: The first step in any investigation is to Answer: Make a copy of the suspected storage device. (Bit-level copy) Q: EnCase, Forensic Toolkit, and OSForensics can be used to Answer: Make bit-level copies of hard drives (ideally two copies) Q: What three main technical data collection considerations must be kept in mind? Answer: Understanding the life span of information, collecting information quickly, and collecting bit-level information Q: Life span in forensics refers to Answer: How long information is valid Q: What enables an investigator to reconstruct file fragments if files have been deleted or overwritten? Answer: Bit-level tools Q: What sets standards for digital evidence processing, analysis, and diagnostics? Answer: The DoD Cyber Crime Center (DC3) Q: The three basic tasks of handling evidence are Answer: Find, preserve and prepare evidence Q: A server for used for storage should have a minimum of Answer: RAID 1 (Disk mirroring) but RAID 5 is recommended Q: What customized Linux Live CD is used for computer forensics? Answer: Helix