Digital Forensics Practice Quiz

DF6 W06: Q01. Which file system is commonly analyzed in digital forensic investigations?

XML ASCII NTFS HTML

DF6 W06: Q02. What is the purpose of chain of custody documentation?

To keep a record of every individual who accessed the evidence To catalog data files for analysis To create an exact image of a storage device To recover deleted files

DF6 W06: Q03. Which of the following is a type of high speed memory found on the processor and on the motherboard?

Faraday Memory Cache ROM Write Blocker

DF6 W06: Q04. What type of data is most commonly recovered during data carving?

Network activity logs Hidden or fragmented files Encrypted passwords Metadata of unaltered files

DF6 W06: Q05. What does the 'S' of ASCII stand for?

Storage Code for Internet Information Synthetic System Standard

DF6 W06: Q06. What is the primary use of a Hex Editor in digital forensics?

To edit text-based files To view and edit the raw data of a file To recover deleted files To encrypt files for secure storage

DF6 W06: Q07. Which professional tool is commonly used to analyze USB devices connected to a computer?

USBDeview FTK Imager EnCase UXB Volatility 7

DF6 W06: Q08. What is disk imaging in digital forensics?

The process of scanning a disk for errors Creating an exact bit-for-bit copy of a storage device Reorganizing files for efficiency Compressing files for easy transfer

DF6 W06: Q09. What is the significance of .exe files in digital forensics investigations?

They are text files used for documentation They are executable program files They are encrypted files They are image files

DF6 W06: Q10. Why are contemporaneous notes crucial in digital forensic investigations?

They provide legal validation of the investigation process They enable the recovery of lost data They improve the speed of analysis They simplify chain of custody management

DF6 W06: Q11. What is a key feature of EnCase software?

It performs real-time network monitoring It creates forensic disk images and enables detailed analysis It recovers passwords from encrypted files It decrypts secure emails

DF6 W06: Q12. Which file type is most commonly used for digital photographs?

.wav .txt .docx .jpg

DF6 W06: Q13. What type of data is typically stored in .xls files?

Audio files Spreadsheets Video clips Image sequences

DF6 W06: Q14. What type of file typically uses the .bmp extension?

Audio file Plain text Uncompressed image files Encrypted documents

DF6 W06: Q15. Why is identifying file extensions important in digital forensics?

To determine the type of data stored in a file To encrypt the file for analysis To increase the size of the file To improve data recovery speed

DF6 W06: Q16. What is a greatest risk of using the original device for examination in a digital forensic case?

Speeding up the examination process Ensuring the data remains private Deleting critical evidence The potential for greater accuracy in analysis

DF6 W06: Q17. Why is it important to verify file extensions in forensic investigations?

To determine the file’s compatibility with software To ensure the file type matches its actual content To compress the file for storage To recover deleted files

DF6 W06: Q18. Why is the chain of custody crucial in computer forensic investigations?

It prevents evidence from being lost It ensures evidence integrity and admissibility in court It speeds up the investigation process It organizes data for analysis

Digital Forensics Week 06 Practice Quiz (18 Questions)

Score 11 or greater to pass.