1
WGU
WGU D431 O BJECTIVE ASSESSMENT REVIEW
(NEW 2025/ 2026 U PDATE) DIGITAL FORENSICS
IN CYBERSECURITY | QS & AS| GRADE A 100%
CORRECT (VERIFIED ANSWERS)
What is The Advanced Forensic Format (AFF) - ANS ✓It is an open file
standard with three variations: AFF, AFM, and AFD. The AFF variation stores all
data and metadata in a single file.
What are the five type of drive connection types? - ANS ✓Integrated Drive
Electronics (IDE)
Extended Integrated Drive Electronics (EIDE)
Parallel Advanced Technology Attachment (PATA)
Serial Advanced Technology Attachment (SATA)
Serial SCSI
What are the 3 techniques for forensic analysis? - ANS ✓Live Analysis,
Physical Analysis, Logical Analysis
What measures should be taken when gathering evidence? - ANS ✓Avoid
changing the evidence, Determine when evidence was created, Search
throughout the device, Determine information about encrypted and steganized
files, Present the evidence well
What is Temporary Data? - ANS ✓Data that an operating system creates and
overwrites without the computer user taking a direct action to save this data.
WGU D431
, 2
WGU
What are some examples of Volatile Data? - ANS ✓Swap file, State of Network
connections, State of running processes.
Swap file, State of Network connections, State of running processes. - ANS
✓Volatile data, Temporary data, and Persistent data.
What are the 3 basic tasks to handling evidence? - ANS ✓Find evidence,
Preserve evidence, Prepare evidence.
What are the principles when gathering evidence? - ANS ✓Avoid changing
the evidence, Determine when evidence was created, Trust only physical
evidence, search throughout the device, present the evidence well.
What are the 3 basic tasks related to handling evidence? - ANS ✓Find
evidence, Preserve evidence, and Prepare evidence.
What is "file slack" or "slack space"? - ANS ✓The unused space between the
logical end of file and the physical end of file. It is also called slack space.
What is the SWGDE Framework - ANS ✓Collect
Preserve
Examine
Transfer
What is the Digital Forensic Research Workshop (DFRWS) Framework? -
ANS ✓Identification
Preservation
Collection
Examination
Analysis
WGU D431
WGU
WGU D431 O BJECTIVE ASSESSMENT REVIEW
(NEW 2025/ 2026 U PDATE) DIGITAL FORENSICS
IN CYBERSECURITY | QS & AS| GRADE A 100%
CORRECT (VERIFIED ANSWERS)
What is The Advanced Forensic Format (AFF) - ANS ✓It is an open file
standard with three variations: AFF, AFM, and AFD. The AFF variation stores all
data and metadata in a single file.
What are the five type of drive connection types? - ANS ✓Integrated Drive
Electronics (IDE)
Extended Integrated Drive Electronics (EIDE)
Parallel Advanced Technology Attachment (PATA)
Serial Advanced Technology Attachment (SATA)
Serial SCSI
What are the 3 techniques for forensic analysis? - ANS ✓Live Analysis,
Physical Analysis, Logical Analysis
What measures should be taken when gathering evidence? - ANS ✓Avoid
changing the evidence, Determine when evidence was created, Search
throughout the device, Determine information about encrypted and steganized
files, Present the evidence well
What is Temporary Data? - ANS ✓Data that an operating system creates and
overwrites without the computer user taking a direct action to save this data.
WGU D431
, 2
WGU
What are some examples of Volatile Data? - ANS ✓Swap file, State of Network
connections, State of running processes.
Swap file, State of Network connections, State of running processes. - ANS
✓Volatile data, Temporary data, and Persistent data.
What are the 3 basic tasks to handling evidence? - ANS ✓Find evidence,
Preserve evidence, Prepare evidence.
What are the principles when gathering evidence? - ANS ✓Avoid changing
the evidence, Determine when evidence was created, Trust only physical
evidence, search throughout the device, present the evidence well.
What are the 3 basic tasks related to handling evidence? - ANS ✓Find
evidence, Preserve evidence, and Prepare evidence.
What is "file slack" or "slack space"? - ANS ✓The unused space between the
logical end of file and the physical end of file. It is also called slack space.
What is the SWGDE Framework - ANS ✓Collect
Preserve
Examine
Transfer
What is the Digital Forensic Research Workshop (DFRWS) Framework? -
ANS ✓Identification
Preservation
Collection
Examination
Analysis
WGU D431
