Digital Forensics Practice Quiz

DF6 W01: Q01. What is the name generally given to the first stage of the Digital Forensics process?

Reporting Collection Analysis Examination

DF6 W01: Q02. What is the name generally given to the second stage of the Digital Forensics process?

Reporting Collection Analysis Examination

DF6 W01: Q03. What is the name generally given to the third stage of the Digital Forensics process?

Reporting Collection Analysis Examination

DF6 W01: Q04. What is the name generally given to the fourth and final stage of the Digital Forensics process?

Reporting Collection Analysis Examination

DF6 W01: Q05. Which of the following MUST be TRUE regarding a Digital Forensics investigation?

The examiner must be competent and trained in the field. The physical examination must take place in a sterile environment. The first at scene investigator must read the suspect their rights. The analyst must have passed the Lab 9 Forensics examinations.

DF6 W01: Q06. Which of the following MUST be produced during a Digital Forensics investigation?

A signed clearance form from the judge accepting the authority of the key investigator. A download of key filenames and passwords. A collection of photographs of the hard disk from the crime scene. An Audit Trail or contemperonous notes recording the entire investigation.

DF6 W01: Q07. Sometimes the first stage of a Digital Forensics investigation is referred to as Capture or Aquisition. Which of the following is another term for the first stage?

Reporting Collection Analysis Examination

DF6 W01: Q08. Which of the following shows the correct order of steps in a Digital Forensics investigation?

Capture, Testing, Replication, and Re-testing Collection, Examination, Analysis, and Reporting Seizure, Documentation, Investigation, and Arrest Arrest, Investigation, Evidence, and Trial

DF6 W01: Q09. Which of the following locations would digital evidence NOT typically be found if the computer is switched off?

USB Flash Drive Random Access Memory Hard Disk Drive An ISP's Log Files

DF6 W01: Q10. Which one of the following laws is designed to provide authorities, such as the police, the right to confiscate computer equipment?

The Equalities Act The Regulation of Investigatory Powers Act The Computer Misuse Act The Data Protection Act

DF6 W01: Q11. Which one of the following would be classed as system specific information?

Contents of the system's hard disk drive Fingerprints Physical characteristics of a system's hard disk drive DNA

DF6 W01: Q12. Which one of the following is a term used in the Digital Forensics field?

Recursion White Hacker Looping Steganography

DF6 W01: Q13. Which of the following is a type of secondary storage that could be used in part of a Digital Forensics investigation?

CPU RAM ROM USB Flash Drive

DF6 W01: Q14. Which of the following is regarded as an input device?

Hard Disk Mouse CPU Monitor

DF6 W01: Q15. How many BITs are in a Byte?

1 4 8 16

DF6 W01: Q16. What number system is this an example of: 2B5A?

Binary Hex Octal Decimal

DF6 W01: Q17. Which of the following is NOT an example of computer hardware?

Keyboard Excel Mouse CPU

DF6 W01: Q18. Which of the following is hardware that a Digital Forensics first responder may secure at the investigation scene?

Spreadsheet Web browser Photoshop Hard Disk

Digital Forensics Week 01 Practice Quiz (18 Questions)

Score 11 or greater to pass.