Intro to Digital Forensics Final Exam Questions and Answers (All Questions
Updated) – 100% Solved
10011100 - ✔✔✔-Which of the following is equivalent to 0x9C
10101100
1001-1010
10011100
none of the above
accessed - ✔✔✔-Which of the listed date/time stamps is updated whenever a file in accessed
by the file system?
created
modified
accessed
,Intro to Digital Forensics Final Exam Questions and Answers (All Questions
Updated) – 100% Solved
none of the above
administrative matters - ✔✔✔-Which of the following is the "best" choice when digital
evidence can also be valuable for incidents other than litigation and matters of national security.
administrative matters
digital forensics
criminal investigations
intelligence
all of the above - ✔✔✔-According to the author which of the following are log files of interest
in network investigations?
authentication, firewall
application, operating system
all of the above
none of the above
,Intro to Digital Forensics Final Exam Questions and Answers (All Questions
Updated) – 100% Solved
all of the above - ✔✔✔-According to the author, what are the advantages of virtual labs?
1. cost savings
2. access to more tools and storage
3. access to diverse and greater expertise
4. reduction of unnecessary duplication of resource
all of the above
all of the above except number 4
All of the above - ✔✔✔-An IPv4 address is made up of:
four octets
four decimal numbers
all of the above
none of the above
, Intro to Digital Forensics Final Exam Questions and Answers (All Questions
Updated) – 100% Solved
All of the above - ✔✔✔-An IPv6 address is made up of:
eight hextets, 128 bits
32 hexadecimal digits, 32 nibbles
all of the above
none of the above
all of the above - ✔✔✔-The log or audit trail for evidence storage should be maintained with:
1. who entered
2. when they entered
3. what they removed
4. or what they returned
all of the above
Updated) – 100% Solved
10011100 - ✔✔✔-Which of the following is equivalent to 0x9C
10101100
1001-1010
10011100
none of the above
accessed - ✔✔✔-Which of the listed date/time stamps is updated whenever a file in accessed
by the file system?
created
modified
accessed
,Intro to Digital Forensics Final Exam Questions and Answers (All Questions
Updated) – 100% Solved
none of the above
administrative matters - ✔✔✔-Which of the following is the "best" choice when digital
evidence can also be valuable for incidents other than litigation and matters of national security.
administrative matters
digital forensics
criminal investigations
intelligence
all of the above - ✔✔✔-According to the author which of the following are log files of interest
in network investigations?
authentication, firewall
application, operating system
all of the above
none of the above
,Intro to Digital Forensics Final Exam Questions and Answers (All Questions
Updated) – 100% Solved
all of the above - ✔✔✔-According to the author, what are the advantages of virtual labs?
1. cost savings
2. access to more tools and storage
3. access to diverse and greater expertise
4. reduction of unnecessary duplication of resource
all of the above
all of the above except number 4
All of the above - ✔✔✔-An IPv4 address is made up of:
four octets
four decimal numbers
all of the above
none of the above
, Intro to Digital Forensics Final Exam Questions and Answers (All Questions
Updated) – 100% Solved
All of the above - ✔✔✔-An IPv6 address is made up of:
eight hextets, 128 bits
32 hexadecimal digits, 32 nibbles
all of the above
none of the above
all of the above - ✔✔✔-The log or audit trail for evidence storage should be maintained with:
1. who entered
2. when they entered
3. what they removed
4. or what they returned
all of the above
