WGU D431 OA COMPUTER FORENSICS EXAM
2026 QUESTIONS WITH 100% ACCURATE
SOLUTIONS GRADED A+
◉ What uses Advanced Forensic Format (AFF)? Answer: The Sleuth
Kit, Autopsy, OSFMount, Xmount, FTK Imager, and FTK support
AFFv3 image format.
◉ What is an SQL injection? Answer: The placement of malicious code
in SQL statements, via web page input.
◉ What uses the .odt format and what is it? Answer: OpenDocument
(.odt) files are compatible with Word and open-source applications
(OpenOffice, LibreOffice, etc.)
◉ What is the Oracle database format? Answer: sid.DBS.xxx.DBF
(entire Oracle database); sid.DBS.INIT.QRA (parameter file used when
an instance is started); sid.P.ORAENV (environment definition file that
must be run before starting an instance or application.
◉ What is the exchange file format? Answer: A 3d model file format
that doesn't belong to any particular application but is used primarily to
transfer (exchange) a model between applications.
, ◉ What is Eudora and what file format does it use? Answer: An email
client that was used on the classic MAC OS, MAC OSX, and Microsoft
Windows OS' and uses the .mbx file extension.
◉ What tool makes a bit-by-bit copy of a Windows 8 phone? Answer:
Cellebrite Universal Forensic Extraction Device (UFED) or Forensics
Tool Kit (FTK)
◉ What tool would you use to unlock an iPhone? Answer: XRY
software
◉ Which tool can do a workflow check of steganography? Answer:
Forensics Tool Kit (FTK) and Encase
◉ What is Data Doctor? Answer: Data recovery software
◉ What is the /var/log/lpr directory? Answer: The Linux printer log
◉ How does Windows store passwords? Answer: Using hashes in the
SAM file.
◉ Where does Windows store passwords? Answer: In the SAM file in
\Windows\System32\
2026 QUESTIONS WITH 100% ACCURATE
SOLUTIONS GRADED A+
◉ What uses Advanced Forensic Format (AFF)? Answer: The Sleuth
Kit, Autopsy, OSFMount, Xmount, FTK Imager, and FTK support
AFFv3 image format.
◉ What is an SQL injection? Answer: The placement of malicious code
in SQL statements, via web page input.
◉ What uses the .odt format and what is it? Answer: OpenDocument
(.odt) files are compatible with Word and open-source applications
(OpenOffice, LibreOffice, etc.)
◉ What is the Oracle database format? Answer: sid.DBS.xxx.DBF
(entire Oracle database); sid.DBS.INIT.QRA (parameter file used when
an instance is started); sid.P.ORAENV (environment definition file that
must be run before starting an instance or application.
◉ What is the exchange file format? Answer: A 3d model file format
that doesn't belong to any particular application but is used primarily to
transfer (exchange) a model between applications.
, ◉ What is Eudora and what file format does it use? Answer: An email
client that was used on the classic MAC OS, MAC OSX, and Microsoft
Windows OS' and uses the .mbx file extension.
◉ What tool makes a bit-by-bit copy of a Windows 8 phone? Answer:
Cellebrite Universal Forensic Extraction Device (UFED) or Forensics
Tool Kit (FTK)
◉ What tool would you use to unlock an iPhone? Answer: XRY
software
◉ Which tool can do a workflow check of steganography? Answer:
Forensics Tool Kit (FTK) and Encase
◉ What is Data Doctor? Answer: Data recovery software
◉ What is the /var/log/lpr directory? Answer: The Linux printer log
◉ How does Windows store passwords? Answer: Using hashes in the
SAM file.
◉ Where does Windows store passwords? Answer: In the SAM file in
\Windows\System32\
