PAPER 1H PRACTICE EXAMINATION
2026 QUESTIONS WITH ANSWERS
GRADED A+
◍ We use a special error detection calculation to authenticate the data on a
hard drive that as being used as evidence in court. Which type of error
detection calculation is typically used?.
Answer: One-way hash
◍ The inode is the data structure on a drive that describes each file and is used
in:.
Answer: UFS
◍ The file system that organizes a volume's contents around five master files,
such as the catalog file and the extents overflow file, is:.
Answer: HFS+
◍ A typical hard drive has an arm, a read/write head, and:.
Answer: Platters
◍ standards of due care.
Answer: When organizations adopt security measures for a legal defense,
they may need to show that they have done what any prudent organization
would do in similar circumstances. This is referred to as ____________
◍ transference.
Answer: the ____________ control strategy attempts to shift risk to other
assets, other processes, or other organizations
◍ unclassified.
Answer: Federal agencies such as the NSA, FBI, and CIA use specialty
, classification schemes. For materials that are not considered 'National
Security Information', __________ data is the lowest level classification.
◍ The term for recovering from computer-related attacks, incidents, and
compromises is:.
Answer: Remediation
◍ What is the role of the FAT in a FAT-formatted file system?.
Answer: Provides status on every cluster on the drive, indicating if it is free
or part of a file
◍ asset valuation.
Answer: The process of assigning financial value or worth to each
information asset.
◍ Which of the following statements are true about low-level formatting,
assuming we perform it without a high-level formatting? Select all that
apply..
Answer: Rewrites all sector headers and check values.Presents the system
with a blank hard drive.Established addressable tracks and sectors on the
hard drive.
◍ false.
Answer: According to Sun Tzu, if you know your self and know your enemy
you have an average chance to be successful in an engagement.
◍ On a typical television show about detectives, a detective walks into a crime
scene, finds a computer, logs in, and searches the file system for evidence. Is
this evidence admissible? Why or why not?.
Answer: No, because the detective's actions can't be distinguished from
those of perpetrators or victims.
◍ Chapter 4 discussed several
U. S. federal laws and industry standards that may induce a site to keep
event logs. The laws require federal agencies and certain industries to keep
records, but don't really apply to other enterprises. However, it is customary
in some industries to implement other security mechanisms, like passwords.