|
Question 1 of 20
|
5.0 Points
|
Every computer investigation is different, but one rule remains the same:
|
A. memorize, memorize, memorize!
|
|
|
B. document, document, document!
|
|
|
C. study, study, study!
|
|
|
D. analyze, analyze, analyze!
|
|
Reset Selection
|
|
As with traditional criminal investigations, any investigator or individual wishing access to evidence must:
|
A. promise to return it within a certain number of hours.
|
|
|
B. have a friend bring it back promptly.
|
|
|
C. sign the evidence out.
|
|
|
D. show identification.
|
|
Reset Selection
|
|
All media used in the analysis of computer evidence must be __________ for courtroom purposes.
|
A. forensically sterile
|
|
|
B. refurbished
|
|
|
C. forensically clustered
|
|
|
D. legally analyzed
|
|
Reset Selection
|
|
__________ for all forensic software that is expected to be employed in the analysis of suspect media should be verified prior to actual analysis.
|
A. Enhancement
|
|
|
B. Storage
|
|
|
C. Licenses
|
|
|
D. Write-blocking
|
|
Reset Selection
|
|
A computer crime investigator with another law enforcement agency has obtained some great “password cracker” software and has offered to send you a copy. With regard to the copy, you should:
|
A. accept it to help foster better cooperation between agencies.
|
|
|
B. accept it because one problem faced by investigators is lack of money to buy investigative tools and equipment.
|
|
|
C. not accept it because copying software is illegal.
|
|
|
D. accept it but be sure it is formatted for your equipment.
|
|
Reset Selection
|
|
All examinations and analysis should be conducted on the __________, ideally created on forensic machines.
|
A. original
|
|
|
B. BIOS password
|
|
|
C. storage enhancement program
|
|
|
D. image
|
|
Reset Selection
|
|
__________ prevents the destruction, contamination, or corruption of original media and can be accomplished with many of the popular imaging programs.
|
A. Licensing
|
|
|
B. Write-blocking
|
|
|
C. Peripherals
|
|
|
D. Short-circuiting the chip
|
|
Reset Selection
|
|
Jumping the CMOS involves the manipulation of hardware in which the password is cleared after the __________ has been reset.
|
A. clock
|
|
|
B. chip
|
|
|
C. jumper
|
|
|
D. operating system
|
|
Reset Selection
|
|
After pulling the CMOS battery, the battery should be disconnected for at least __________ hours or longer.
Reset Selection
|
|
By far, the most time-consuming and exasperating method of circumventing CMOS passwords involves the use of:
|
A. social engineering and brute force.
|
|
|
B. partition tables.
|
|
|
C. image verification.
|
|
|
D. compressed files.
|
|
Reset Selection
|
|
Steganographic messages have two parts: the container, which is the file that conceals data, and the __________, which is the actual data.
|
A. sound file
|
|
|
B. compressor
|
|
|
C. message
|
|
|
D. DOS
|
|
Reset Selection
|
|
__________ are identifiers located after the period which indicate the type of file included therein.
|
A. File manuals
|
|
|
B. File clusters
|
|
|
C. File applications
|
|
|
D. File extensions
|
|
Reset Selection
|
|
It is often surprising how individuals will use __________ password for a variety of files.
|
A. a different
|
|
|
B. the same
|
|
|
C. a short
|
|
|
D. a difficult
|
|
Reset Selection
|
|
To figure out a password, investigators may try developing a profile of the suspect or the suspect computer and manually attempt password cracking. This is called:
|
A. stealing.
|
|
|
B. social cracking.
|
|
|
C. social engineering.
|
|
|
D. encrypting.
|
|
Reset Selection
|
|
__________ allow investigators to view the front page of all documents.
|
A. File viewers
|
|
|
B. Front searchers
|
|
|
C. File extensions
|
|
|
D. Text searching utilities
|
|
Reset Selection
|
|
__________ enable investigators to search through innumerable documents for words or phrases consistent with their evidentiary expectations.
|
A. File viewers
|
|
|
B. Parameters
|
|
|
C. Text searching utilities
|
|
|
D. Social engineers
|
|
Reset Selection
|
|
With regard to DOS, you should:
|
A. forget about it since everything is now Windows-based.
|
|
|
B. realize that it is an old system no longer being taught.
|
|
|
C. know that it could damage your computer.
|
|
|
D. learn to use it since most computers use its operating system.
|
|
Reset Selection
|
|
DOS __________ will default to the drive in use unless otherwise specified.
|
A. modifications
|
|
|
B. photographs
|
|
|
C. commands
|
|
|
D. alphabets
|
|
Reset Selection
|
|
DOS internal commands are loaded into memory from the __________ file upon startup.
|
A. COMMAND.COM
|
|
|
B. START.COM
|
|
|
C. STARTUP.COM
|
|
|
D. DIRECTORY.COM
|
|
Reset Selection
|
|
DOS __________ commands must be stored on the disk in order to be executed.
|
A. external
|
|
|
B. integral
|
|
|
C. standardized
|
|
|
D. engineering
|
|
|
cjpnwe
assignment_7.docx
0
