File signature analysis involves collecting information from the __________ of a file to determine the
type and function of the file

You should always work with original evidence

When a system is compromised, attackers often try to disable auditing, in Windows 7; modifications to
the audit policy are recorded as entries of Event ID____________.

Which of the following file in Novel GroupWise stores information about user accounts?

Which of the following network attacks refers to sending huge volumes of email to an address in an
attempt to overflow the mailbox, or overwhelm the server where the email address is hosted, to cause a
denial-of-service attack?

Digital evidence is not fragile in nature.

Which of the following log injection attacks uses white space padding to create unusual log entries?

Which of the following is not correct when documenting an electronic crime scene?

Syslog is a client/server protocol standard for forwarding log messages across an IP network. Syslog
uses ___________to transfer log messages in a clear text format.

Under no circumstances should anyone, with the exception of qualified computer forensics personnel,

make any attempts to restore or recover information from a computer system or device that holds
electronic information.