8/24/25, 5:49 PM WGU Course C840 - Digital Forensics in Cybersecurity EXAM (2025/2026) Updated: EXAM QUESTIONS WITH ACCURATE ANS…
WGU Course C840 - Digital Forensics in Cybersecurity
EXAM (2025/2026) Updated: EXAM QUESTIONS WITH
ACCURATE ANSWERS | GET IT RIGHT!!
A forensic scientist arrives at D
a crime scene to begin
collecting evidence.
What is the first thing the
forensic scientist should do?
A Turn off the power to the
entire area being
examined
B Unplug all network
connections so data cannot
be deleted remotely
C Gather up all physical
evidence and move it out
as quickly as possible
D Photograph all evidence in
its original place
https://quizlet.com/1066954635/wgu-course-c840-digital-forensics-in-cybersecurity-exam-20252026-updated-exam-questions-with-accurate-answers-… 1/14
7
,8/24/25, 5:49 PM WGU Course C840 - Digital Forensics in Cybersecurity EXAM (2025/2026) Updated: EXAM QUESTIONS WITH ACCURATE ANS…
Which method of copying C
digital evidence ensures
proper evidence
collection?
A Make the copy using file
transfer
B Copy files using drag and
drop
C Make the copy at the bit-
level
D Copy the logical partitions
A computer involved in a C
crime is infected with
malware. The computer is
on and connected to the
company's network. The
forensic investigator arrives
at the scene.
Which action should be the
investigator's first step?
A Remove the malware and
secure the computer.
B Unplug the computer's
power cord.
C Unplug the computer's
Ethernet cable.
D Label all the attachments
and secure the computer.
https://quizlet.com/1066954635/wgu-course-c840-digital-forensics-in-cybersecurity-exam-20252026-updated-exam-questions-with-accurate-answers-… 2/14
7
,8/24/25, 5:49 PM WGU Course C840 - Digital Forensics in Cybersecurity EXAM (2025/2026) Updated: EXAM QUESTIONS WITH ACCURATE ANS…
What are the three basic A
tasks that a systems
forensic specialist must keep
in mind when handling
evidence during a
cybercrime investigation?
Answer options may be
used more than once or not
at all. Select your answers
from the pull-down list.
1 Preserve evidence
2 Catalog evidence
3 Prepare evidence
4 Make multiple copies of
evidence
5 Disseminate evidence
6 Prepare evidence report
7 Find evidence
A 1,3,7
B 2,3,7
How do forensic specialists C
show that digital evidence
was handled in a protected,
secure manner during the
process of collecting and
analyzing the evidence?
A Forensic lab logbooks
B Forensic software logs
C Chain of custody
D Chain of email messages
https://quizlet.com/1066954635/wgu-course-c840-digital-forensics-in-cybersecurity-exam-20252026-updated-exam-questions-with-accurate-answers-… 3/14
7
, 8/24/25, 5:49 PM WGU Course C840 - Digital Forensics in Cybersecurity EXAM (2025/2026) Updated: EXAM QUESTIONS WITH ACCURATE ANS…
Which characteristic D
applies to magnetic drives
compared to solid-state
drives (SSDs)?
A Lower capacity
B Better durability
C Lower power consumption
D Lower cost
Which characteristic applies C
to solid-state drives (SSDs)
compared to magnetic
drives?
A They have slower start-up
times.
B They cost less.
C They are less susceptible to
damage.
D They use more power.
Which type of storage B
format should be
transported in a special bag
to reduce electrostatic
interference?
A Solid-state drives
B Magnetic media
C Digital audio tapes
D Optical media
Which Windows component B
is responsible for reading
the boot.ini file and
displaying the boot loader
menu on Windows XP
during the boot process?
A Win32 subsystem
B NTLDR
https://quizlet.com/1066954635/wgu-course-c840-digital-forensics-in-cybersecurity-exam-20252026-updated-exam-questions-with-accurate-answers-… 4/14
7
WGU Course C840 - Digital Forensics in Cybersecurity
EXAM (2025/2026) Updated: EXAM QUESTIONS WITH
ACCURATE ANSWERS | GET IT RIGHT!!
A forensic scientist arrives at D
a crime scene to begin
collecting evidence.
What is the first thing the
forensic scientist should do?
A Turn off the power to the
entire area being
examined
B Unplug all network
connections so data cannot
be deleted remotely
C Gather up all physical
evidence and move it out
as quickly as possible
D Photograph all evidence in
its original place
https://quizlet.com/1066954635/wgu-course-c840-digital-forensics-in-cybersecurity-exam-20252026-updated-exam-questions-with-accurate-answers-… 1/14
7
,8/24/25, 5:49 PM WGU Course C840 - Digital Forensics in Cybersecurity EXAM (2025/2026) Updated: EXAM QUESTIONS WITH ACCURATE ANS…
Which method of copying C
digital evidence ensures
proper evidence
collection?
A Make the copy using file
transfer
B Copy files using drag and
drop
C Make the copy at the bit-
level
D Copy the logical partitions
A computer involved in a C
crime is infected with
malware. The computer is
on and connected to the
company's network. The
forensic investigator arrives
at the scene.
Which action should be the
investigator's first step?
A Remove the malware and
secure the computer.
B Unplug the computer's
power cord.
C Unplug the computer's
Ethernet cable.
D Label all the attachments
and secure the computer.
https://quizlet.com/1066954635/wgu-course-c840-digital-forensics-in-cybersecurity-exam-20252026-updated-exam-questions-with-accurate-answers-… 2/14
7
,8/24/25, 5:49 PM WGU Course C840 - Digital Forensics in Cybersecurity EXAM (2025/2026) Updated: EXAM QUESTIONS WITH ACCURATE ANS…
What are the three basic A
tasks that a systems
forensic specialist must keep
in mind when handling
evidence during a
cybercrime investigation?
Answer options may be
used more than once or not
at all. Select your answers
from the pull-down list.
1 Preserve evidence
2 Catalog evidence
3 Prepare evidence
4 Make multiple copies of
evidence
5 Disseminate evidence
6 Prepare evidence report
7 Find evidence
A 1,3,7
B 2,3,7
How do forensic specialists C
show that digital evidence
was handled in a protected,
secure manner during the
process of collecting and
analyzing the evidence?
A Forensic lab logbooks
B Forensic software logs
C Chain of custody
D Chain of email messages
https://quizlet.com/1066954635/wgu-course-c840-digital-forensics-in-cybersecurity-exam-20252026-updated-exam-questions-with-accurate-answers-… 3/14
7
, 8/24/25, 5:49 PM WGU Course C840 - Digital Forensics in Cybersecurity EXAM (2025/2026) Updated: EXAM QUESTIONS WITH ACCURATE ANS…
Which characteristic D
applies to magnetic drives
compared to solid-state
drives (SSDs)?
A Lower capacity
B Better durability
C Lower power consumption
D Lower cost
Which characteristic applies C
to solid-state drives (SSDs)
compared to magnetic
drives?
A They have slower start-up
times.
B They cost less.
C They are less susceptible to
damage.
D They use more power.
Which type of storage B
format should be
transported in a special bag
to reduce electrostatic
interference?
A Solid-state drives
B Magnetic media
C Digital audio tapes
D Optical media
Which Windows component B
is responsible for reading
the boot.ini file and
displaying the boot loader
menu on Windows XP
during the boot process?
A Win32 subsystem
B NTLDR
https://quizlet.com/1066954635/wgu-course-c840-digital-forensics-in-cybersecurity-exam-20252026-updated-exam-questions-with-accurate-answers-… 4/14
7
