Computer Forensics Chapter 1 UPDATED ACTUAL Questions and CORRECT Answers
1 keer bekeken 0 keer verkocht
Vak
Computer Forensics
Instelling
Computer Forensics
Computer Forensics Chapter 1 UPDATED
ACTUAL Questions and CORRECT
Answers
The American Heritage Dictionary defines __________as "the use of science and technology to
investigate and establish facts in criminal or civil courts of law." - CORRECT ANSWER -
forensics
Generally, __________ is c...
Computer Forensics Chapter 1 UPDATED
ACTUAL Questions and CORRECT
Answers
The American Heritage Dictionary defines __________as "the use of science and technology to
investigate and establish facts in criminal or civil courts of law." - CORRECT ANSWER -
forensics
Generally, __________ is considered to be the use of analytical and investigative techniques to
identify, collect, examine, and preserve evidence or information that is magnetically stored or
encoded. - CORRECT ANSWER - computer forensics
Computer forensics begins with a thorough understanding of what? - CORRECT
ANSWER - computer hardware
The term that is given to testimony taken from a witness or party to a case before a trial is known
as what? - CORRECT ANSWER - deposition
Before you can do any forensic analysis or examination, you have to do what? - CORRECT
ANSWER - collect the evidence
The real difference between a mediocre investigator and a star investigator is the __________. -
CORRECT ANSWER - evidence analysis
__________is information that has been processed and assembled to be relevant to an
investigation, and that supports a specific finding or determination. - CORRECT
ANSWER - Digital evidence
The __________is the continuity of control of evidence that makes it possible to account for all
that has happened to evidence between its original collection and its appearance in court,
preferably unaltered. - CORRECT ANSWER - chain of custody
, __________is data stored as written matter, on paper or in electronic files. - CORRECT
ANSWER - Documentary evidence
__________is information that helps explain other evidence. - CORRECT ANSWER -
Demonstrative evidence
Data about information, such as disk partition structures, and file tables, is called what? -
CORRECT ANSWER - metadata
The process of examining malicious computer code is known as __________. - CORRECT
ANSWER - software forensics
One must be able to show the whereabouts and custody of the evidence, how it was handled and
stored and by whom, from the time the evidence is first seized by a law enforcement officer or
civilian investigator until the moment it is shown in court. This is referred to as what? -
CORRECT ANSWER - chain of custody
Which of the following correctly shows how the instructions in a computer's BIOS are stored? -
CORRECT ANSWER - (EEPROM)
The most common computer hard drives today are __________. - CORRECT ANSWER -
(SATA)
Which of the following options is a common standard file format for executables, object code,
and shared libraries for UNIX-based systems? - CORRECT ANSWER - ELF
Which of the following was the first file system created specifically for Linux? - CORRECT
ANSWER - Extended File System
Voordelen van het kopen van samenvattingen bij Stuvia op een rij:
Verzekerd van kwaliteit door reviews
Stuvia-klanten hebben meer dan 700.000 samenvattingen beoordeeld. Zo weet je zeker dat je de beste documenten koopt!
Snel en makkelijk kopen
Je betaalt supersnel en eenmalig met iDeal, creditcard of Stuvia-tegoed voor de samenvatting. Zonder lidmaatschap.
Focus op de essentie
Samenvattingen worden geschreven voor en door anderen. Daarom zijn de samenvattingen altijd betrouwbaar en actueel. Zo kom je snel tot de kern!
Veelgestelde vragen
Wat krijg ik als ik dit document koop?
Je krijgt een PDF, die direct beschikbaar is na je aankoop. Het gekochte document is altijd, overal en oneindig toegankelijk via je profiel.
Tevredenheidsgarantie: hoe werkt dat?
Onze tevredenheidsgarantie zorgt ervoor dat je altijd een studiedocument vindt dat goed bij je past. Je vult een formulier in en onze klantenservice regelt de rest.
Van wie koop ik deze samenvatting?
Stuvia is een marktplaats, je koop dit document dus niet van ons, maar van verkoper MGRADES. Stuvia faciliteert de betaling aan de verkoper.
Zit ik meteen vast aan een abonnement?
Nee, je koopt alleen deze samenvatting voor €10,37. Je zit daarna nergens aan vast.