When reviewing web logs, you see an entry for resource not found in the HTTP status code filed.
When reviewing web logs, you see an entry for resource not found in the HTTP status code filed. What is the actual error code that you would see in the log for resource not found? A. 202 B. 404 C. 505 D. 909
You are called in to assist the police in an investigation involving a suspected drug dealer.
You are called in to assist the police in an investigation involving a suspected drug dealer. The suspects house was searched by the police after a warrant was obtained and they located a floppy disk in the suspects bedroom. The disk contains several files, but they appear to be password protected. What are two common […]
When examining a hard disk without a write-blocker, you should not start windows because Windows will write da
When examining a hard disk without a write-blocker, you should not start windows because Windows will write data to the: A. Recycle Bin B. MSDOS.sys C. BIOS D. Case files
An Employee is suspected of stealing proprietary information belonging to your company that he had no rights t
An Employee is suspected of stealing proprietary information belonging to your company that he had no rights to possess. The information was stored on the Employees Computer that was protected with the NTFS Encrypted File System (EFS) and you had observed him copy the files to a floppy disk just before leaving work for the […]
What type of file is represented by a colon (:) with a name following it in the Master File Table of NTFS disk
What type of file is represented by a colon (:) with a name following it in the Master File Table of NTFS disk? A. A compressed file B. A Data stream file C. An encrypted file D. A reserved file
In Microsoft file structures, sectors are grouped together to form:
In Microsoft file structures, sectors are grouped together to form: A. Clusters B. Drives C. Bitstreams D. Partitions
While working for a prosecutor, what do you think you should do if the evidence you found appears to be exculp
While working for a prosecutor, what do you think you should do if the evidence you found appears to be exculpatory and is not being released to the defense? A. Keep the information of file for later review B. Destroy the evidence C. Bring the information to the attention of the prosecutor, his or her […]
When you carve an image, recovering the image depends on which of the following skills?
When you carve an image, recovering the image depends on which of the following skills? A. Recognizing the pattern of the header content B. Recovering the image from a tape backup C. Recognizing the pattern of a corrupt file D. Recovering the image from the tape backup
Which of the following is NOT a graphics file?
Which of the following is NOT a graphics file? A. Picture1.tga B. Picture2.bmp C. Picture3.nfo D. Picture4.psd
You have used a newly released forensic investigation tool, which doesn’t meet the Daubert Test, during
You have used a newly released forensic investigation tool, which doesn’t meet the Daubert Test, during a case. The case has ended-up in court. What argument could the defense make to weaken your case? A. The tool hasn’t been tested by the International Standards Organization (ISO) B. Only the local law enforcement should use the […]