ITSY-2343 Mid Term Review
____ steganography places data from the secret file into the host file without displaying the secret data
when you view the host file in its associated program.
a. Replacement
b. Append
c. Substitution
d. Insertion Correct Answer: Insertion
____ was introduced when Microsoft created Windows NT and is still the main file system in Windows
10.
a. FAT32
b. VFAT
c. NTFS
d. HPFS Correct Answer: NTFS
____ was created by police officers who wanted to formalize credentials in digital investigations.
a. HTCN
b. NISPOM
c. TEMPEST
d. IACIS Correct Answer: IACIS
____ is Windows XP system service dispatch stubs to executables functions and internal support
functions.
a. Ntdll.dll
b. User32.dll
c. Advapi32.dll
d. Gdi32.dll Correct Answer: Ntdll.dll
____ records are data the system maintains, such as system log files and proxy server logs.
a. Computer-generated
b. Business
c. Computer-stored
d. Hearsay Correct Answer: computer generated
____ is the physical address support program for accessing more than 4 GB of physical RAM.
a. Hal.dll
b. Ntkrnlpa.exe
c. BootSect.dos
, d. Io.sys Correct Answer: b. Ntkrnlpa.exe
____ is the file structure database that Microsoft originally designed for floppy disks.
a. NTFS
b. FAT32
c. VFAT
d. FAT Correct Answer: FAT
____ is a data-hiding technique that uses host files to cover the contents of a secret message.
a. Steganography
b. Steganalysis
c. Graphie
d. Steganos Correct Answer: a. Steganography
____ is a 16-bit real-mode program that queries the system for device and configuration data, and then
passes its findings to Ntldr.
a. Hal.dll
b. Boot.ini
c. NTDetect.com
d. BootSect.dos Correct Answer: c. NTDetect.com
____ involves sorting and searching through investigation findings to separate good data and suspicious
data.
a. Validation
b. Filtering
c. Acquisition
d. Reconstruction Correct Answer: b. Filtering
____ involves recovering information from a computer that was deleted by mistake or lost during a
power surge or server crash, for example.
a. Data recovery
b. Network forensics
c. Computer forensics
d. Disaster recovery Correct Answer: a. Data recovery
____ involves determining how much risk is acceptable for any process or operation, such as replacing
equipment.
a. Risk configuration
b. Change management
c. Configuration management
d. Risk management Correct Answer: d. Risk management
____ steganography places data from the secret file into the host file without displaying the secret data
when you view the host file in its associated program.
a. Replacement
b. Append
c. Substitution
d. Insertion Correct Answer: Insertion
____ was introduced when Microsoft created Windows NT and is still the main file system in Windows
10.
a. FAT32
b. VFAT
c. NTFS
d. HPFS Correct Answer: NTFS
____ was created by police officers who wanted to formalize credentials in digital investigations.
a. HTCN
b. NISPOM
c. TEMPEST
d. IACIS Correct Answer: IACIS
____ is Windows XP system service dispatch stubs to executables functions and internal support
functions.
a. Ntdll.dll
b. User32.dll
c. Advapi32.dll
d. Gdi32.dll Correct Answer: Ntdll.dll
____ records are data the system maintains, such as system log files and proxy server logs.
a. Computer-generated
b. Business
c. Computer-stored
d. Hearsay Correct Answer: computer generated
____ is the physical address support program for accessing more than 4 GB of physical RAM.
a. Hal.dll
b. Ntkrnlpa.exe
c. BootSect.dos
, d. Io.sys Correct Answer: b. Ntkrnlpa.exe
____ is the file structure database that Microsoft originally designed for floppy disks.
a. NTFS
b. FAT32
c. VFAT
d. FAT Correct Answer: FAT
____ is a data-hiding technique that uses host files to cover the contents of a secret message.
a. Steganography
b. Steganalysis
c. Graphie
d. Steganos Correct Answer: a. Steganography
____ is a 16-bit real-mode program that queries the system for device and configuration data, and then
passes its findings to Ntldr.
a. Hal.dll
b. Boot.ini
c. NTDetect.com
d. BootSect.dos Correct Answer: c. NTDetect.com
____ involves sorting and searching through investigation findings to separate good data and suspicious
data.
a. Validation
b. Filtering
c. Acquisition
d. Reconstruction Correct Answer: b. Filtering
____ involves recovering information from a computer that was deleted by mistake or lost during a
power surge or server crash, for example.
a. Data recovery
b. Network forensics
c. Computer forensics
d. Disaster recovery Correct Answer: a. Data recovery
____ involves determining how much risk is acceptable for any process or operation, such as replacing
equipment.
a. Risk configuration
b. Change management
c. Configuration management
d. Risk management Correct Answer: d. Risk management
