CHFI Computer Hacking Forensic Investigator Quiz 06

Question 1 of 10

1. Question

Application and file analysis used by computer forensic investigators to identify and recognize the suspected file for the cybercrime incident. Which of the following describes the correct way for an officer to carry out this analysis?

To view all the downloaded youtube video
To check on suspicious file only
To review Internet history and messages in email and chatbox
To examine the content by view the contents and determine the relevance to the case

Question 2 of 10

2. Question

Ownership and Possession analysis used by the officer to rectify the user that modified, created, and accessed the file in the computer. Which of the following(s) best describe the objective of this analysis?

For the forensic investigator pursue firewall logs to obtain additional information about the user's actions
To record it for future reference in other similar cases
To get permission from the person to access their relative's computer
To obtain the most sensitive and confidential information from the computer

Question 3 of 10

3. Question

A deleted file in the computer system might seem logically erased from the file system, however, it will remain physically on storage media. Which of the following is the correct way to delete a file from a computer system?

To install a software system for clear computer
To transfer the file to another hard disk
To delete a file from Command Prompt
To shut down the computer and remove the power supply

Question 4 of 10

4. Question

Disk Cleanup is one of the ways for the software to clean up itself by check for the file that can be safely removed in order to have more space available for the system. Which of the following type of files will be automatically removed by the Disk Cleanup function?

Downloaded App
Downloaded video
Recently used file
Recycle Bin

Question 5 of 10

5. Question

Data in the computer system can be deleted in various ways, however, it does not mean the data is destroyed. The data still can be restored by the forensic tools if it is deleted. Which of the following ways is used to permanently delete the data and cannot even be recovered using a software solution?

To erase all the file by overwriting them with another data
To move the data to other media such as hard disk
o put it into recycle bin
To format the disk in the computer system

Question 6 of 10

6. Question

What is the main function of Recycle Bin in the computer system?

To permanently delete the file from the computer system
To detect the suspicious file and delete it automatically
To give the user a second chance to store the file before it is permanently deleted
To identify the file that is sensitive and illegal

Question 7 of 10

7. Question

What is the main difference between Trash Can in Macintosh OS X and the Recycle Bin in Window operating systems?

Recycle Bin is only an app as a repository for deleted items and make it not visible in the operating system
Trash Can have the function of automatically restore an old file to its original location while Recycle Bin only have the record of it
Recycle Bin able to automatically restore the file to their original location while Trash Can do not have this function
Recycle Bin can permanently delete to the file and make more space available

Question 8 of 10

8. Question

In some situations, the file will not appear in the Recycle Bin after deleted. Which of the following best describe the above sentence?

Files will not be sent to the Recycle Bin if it is from removable storage media
The file is from the computer's local hard drive
The file content is too sensitive
The file is too small for the Recycle Bin

Question 9 of 10

9. Question

The file will be stored in a special hidden directory in the computer system when it is deleted. Please choose the correct location of the file after it is deleted.

Drive C
Hard Disk
Root directory
Drive D

Question 10 of 10

10. Question

Restoring a file could make the data to be reallocated from Recycle Bin to its original path and filename. Which of the following demonstrates the correct way to restore a file from Recycle Bin?

Righ-click on the file and select "Delete" in the menu item
Righ-click on the file and select "Restore" in the menu item
Restore the file from the INFO file
Press on button "Shift" and "D" on the keyboard at the same time

CHFI Computer Hacking Forensic Investigator Quiz 06

Quiz-summary

Information

Results

Categories