CHFI Computer Hacking Forensic Investigator Quiz 05

Question 1 of 10

1. Question

The organization should not tolerate a hostile working environment. In which of the following situation considered a Hostile Working Environment?

The working place with plants and flowers
Sexual harassment in the workplace
The office equipped with complete tools to carry out daily task
To make fun of the evidence collected

Question 2 of 10

2. Question

Mandy is a computer forensic investigator. When comes to the crime scene, she found that the laptop is switched off. In this scenario, which of the following should Mandy do next?

Mandy should start to duplicate the data from the computer
Mandy should turn on the computer
Mandy should leave the computer off
Mandy should restart the computer

Question 3 of 10

3. Question

Once an investigation occurs, it would be important to keep the crime scene secured and at the same time ensure detach computers from the network. Which of the following best describes the reason?

To ease the job for computer forensic investigator in duplicate data and transfer it to other media
The file's last access data will show on the previous date
To avoid any suspect or intruder further alter the data before obtaining evidence from the computer
To create an image of the hard disk

Question 4 of 10

4. Question

Write protection can prevent data from being written, modified, or deleted on the original hard disk. Which of the following is the consequence when important information being destroyed.

It can prevent virus attack on the computer system
The validity of the data will bring question in the court
It could help ease the job for the investigator
It is easy for data duplication

Question 5 of 10

5. Question

What is the main function to apply for write protection in the forensic software during the evidence analysis?

To prevent data from being written, modified, or deleted on the original hard disk and an image will be created on another storage device
To ease the job for analyzer for the data duplication job
To allow other forensic investigators easily access to the system
To maintain the professionalism of the forensic investigation team

Question 6 of 10

6. Question

Data duplication is one of the important steps for a forensic investigator to copy the original data and transfer it to another media, to prevent the original information from being destroyed. Which of the following is the correct way to duplicate the original data?

To transfer the evidence via network connections
To connect a hard disk to the computer and direct copy from it
To remove the hard disk from the suspect's computer and attached it to another computer to make the copy
To shut down the devices once found in the crime scene

Question 7 of 10

7. Question

It would be crucial for computer forensic investigators for retaining the time and date of creation or modification
of a file in a criminal case. Which of the following is the best way for an officer to demonstrate the proper time zone?

To inform co-worker record down in the logbook before leaving the criminal scene
To inform superior on the correct date and time from the computer
To record the date and time setting from the system with a photograph before shutting down the computer and document it
Directly copy the data into a hard disk

Question 8 of 10

8. Question

A logical extraction is one of the methods used by computer forensic investigators to identify and recover files based on a computer operating system. Which of the following is the correct action to be performed by the officer during the extraction activity?

To recover deleted files from the suspect's device system
To extract data and store it in an unsterilized space
To connect a hard disk to the suspect's computer system for the duplication
To extract data that is encrypted, with password-protected or compressed

Question 9 of 10

9. Question

What kind of information can be obtained by a computer forensic investigator while using timeframe analysis?

To show the action performed on a particular user who logged on to the system
To identify the person who viewed the file
The date and time of the file being downloaded, viewed, or modified on the computer
To check on the computer's IP address

Question 10 of 10

10. Question

All the criminal data or information can be hidden in various ways by a criminal to avoid being detected by a forensic investigator. Which of the following way usually used by cybercriminals in hiding their file?

Store the illegal or sensitive material in the software operating system
To set the file in hidden mode
To give a file name that makes it appear to be something else
To permenantly delete the file from the computer system

CHFI Computer Hacking Forensic Investigator Quiz 05

Quiz-summary

Information

Results

Categories