Practice Assessment Questions & Answers
1. Which form bear the IT stick use to draw mathematical evidence about this protection expos
ure ANS : Sniffer
2. A lawman informer fact-finding a threat traces the beginning to a family. The
couple at delegation of representatives shows the police
officer the only calculating the offspring acknowledge, that is in their offspring's cubicle. The
couple states that their offspring is soon in class at a local junior high. How concede
possibility the police officer constitutionally attain to the calculating ANS : Obtain consent
to search from the persons
3. How endure a legal physicist acquire the network arrangement from a Windows PC before t
aking it from a misconduct setting ANS :
By utilizing the ipconfig command from a command prompt on the calculating
4. The workforce officer of a narrow bookkeeping firm trusts he grant
permission have happened a victim of a phishing swindle. The official clicked on a link in an el
ectronic
mail meaning that requested him to validate the logon references for the firm's connected to
the internet savings account ANS : Browser cache
5. After a party's distinct-purpose, loyal to
foreshadow attendant is hack by a cybercriminal, a forensics expert is contracted to review the
, misdemeanor and accumulate evidence. Which digital evidence bear be calm ANS : Firewall
logs
6. Thomas taken an electronic
mail declaring that he wanted to understand a link and confirm welcome deposit facts to guara
ntee it was secure. Shortly following in position or time following the demands,
Thomas seen services was gone from welcome account.Which mathematical evidence endure
be thought-out to decide by means of what Thomas' report news was imperiled ANS :
Email ideas
7. The chief executive (CEO) of a limited calculating association has iden-
tified a potential hack attack from an outside competition. Which type of evidence concede
possibility a forensics detective use to recognize the source of the taxicab ANS :
Network undertaking logs
8. A judicial chemist lands at a misdemeanor setting to start accumulating evidence.
What is the before anything else the judicial chemist concede possibility do ANS :
Photograph all evi- dence in allure original place
9. Which design of imitating mathematical evidence guarantees decent evidence col- lection
ANS : Make the copy at the bit-level
10. A calculating complicated in a evil is contaminated accompanying malware. The calculatin
g act and related to the party's network. The judicial researcher appears at the setting. Which o
peration endure be the inspector's beginning ANS : - Unplug the calculating's Ethernet cable.