CERTIFICATION EVALUATION 2026 QUESTIONS
WITH SOLUTIONS GRADED A+
◉ .mbx. Answer: Outlook Express
◉ .dbx. Answer: Outlook Express
◉ .mbx. Answer: Eudora
◉ Which storage tech uses NAND?. Answer: SSD
◉ What uses AFF file format?. Answer: Autopsy and Sleuth Kit
◉ Which tool makes a bit-by-bit copy of a windows 8 phone?.
Answer: FTK
◉ What is used to unlock iphone?. Answer: XRY
◉ What is Data Doctor?. Answer: simrestore
, ◉ How does windows store pw?. Answer: hash
◉ Where do deleted Apple iphone/ipad files go?. Answer:
/.Trashes/501
◉ Pwnage. Answer: This utility allows you to unlock a locked iPod
Touch
◉ This is probably the most important log from a forensics point of
view. It has both successful and unsuccessful login events.. Answer:
Security log
◉ This is a very important directory to look at for evidence.. Answer:
C:\Users\username\Documents
◉ Where will Windows store the hash_______in the Windows system
directory. Answer: SAM (Security Accounts Manager) file
◉ _____is the information to be hidden. Answer: Payload
◉ The _____is the signal, stream, or file in which the payload is
hidden.. Answer: Carrier