Digital-Forensics-in-Cybersecurity by WGU Actual Free Exam Questions And Answers

Question 1

Where is the default location for 32-bit programs installed by a user on a 64-bit version of Windows 7?

A. C:\Program files

B. C:\Program files (x86)

C. C:\Windows

D. C:\ProgramData

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

Which law or guideline lists the four states a mobile device can be in when data is extracted from it?

A. NIST SP 800-72 Guidelines

B. Electronic Communications Privacy Act (ECPA)

C. Communications Assistance to Law Enforcement Act (CALEA)

D. Health Insurance Portability and Accountability Act (HIPAA)

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

A forensic scientist arrives at a crime scene to begin collecting evidence.
What is the first thing the forensic scientist should do?

A. Run antivirus scans

B. Seize the computer immediately

C. Photograph all evidence in its original place

D. Document user passwords

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

A company has identified that a hacker has modified files on one of the company's computers. The IT department has collected the storage media from the hacked computer.
Which evidence should be obtained from the storage media to identify which files were modified?

A. File timestamps

B. Operating system version

C. Private IP addresses

D. Public IP addresses

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

After a company's single-purpose, dedicated messaging server is hacked by a cybercriminal, a forensics expert is hired to investigate the crime and collect evidence.
Which digital evidence should be collected?

A. User login credentials

B. Email contents

C. Server configuration files

D. Firewall logs

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

An employee sends an email message to a fellow employee. The message is sent through the company's messaging server.
Which protocol is used to send the email message?

A. IMAP

B. SMTP

C. POP3

D. SNMP

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

Which policy is included in the CAN-SPAM Act?

A. Email sender must provide a method for recipients to opt out of future emails without charge

B. Email sender must include recipient IP address in the email header

C. Email sender must encrypt all outgoing emails

D. Email sender must verify the recipient's consent before sending

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 8

Which principle of evidence collection states that access to evidence must be tracked from the time it is seized through its use in court?

A. Event log

B. Chain of custody

C. Evidence record

D. Audit log

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 9

Which file stores local Windows passwords in the Windows\System32\ directory and is subject to being cracked by using a live CD?

A. HAL

B. IPSec

C. SAM

D. Ntidr

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

WGU Digital Forensics in Cybersecurity (D431/C840) Course - Digital-Forensics-in-Cybersecurity Exam Practice Test

Contact Us

Useful Links

Latest Updated