CHFI Computer Hacking Forensic Investigator Quiz 09

Question 1 of 10

1. Question

Which of the following should be check by a computer forensic investigator when exploring for evidence?

History
Temporary Internet files
Cookies
All of above

Question 2 of 10

2. Question

The Temp Folder is one of the important locations that need to be check by a computer forensic investigator. Which of the following best describes the reason?

It contains all the important data stored by the user
The Temp files contain the information about the users' activities in the file such as the name and number of the website visited
It does provide detailed information of the computer system such as the total memory capacity of the device
It has the function to remove the website that lasts accessed by the user

Question 3 of 10

3. Question

When a computer forensic investigator performs the analysis of the evidence on a Window system, it is important to undergo an extensive backup of data. Which of the following best describes the reason?

To sell it to another party with a higher price
To ensure that no data or information is lost when system crash or malfunctions
To make another copy and share it with other department for reference
The forensic investigation team has a bunch of hard dish for use

Question 4 of 10

4. Question

The Alternate Data Streams (ADS) provide an attacker with hiding rootkits or hacker tools on the compromised system. What is the purpose of using this tool?

This system could allow a hacker to be executed without being noticed by the system administrator
It could use to transfer original data to another media
To send out confidential information via email
Use to permanently delete a file

Question 5 of 10

5. Question

All the file systems need to be mounted before used under Linux or they will be overwritten to devices if not mounted. Which of the following is the feature of the mount command?

To mounted the last access times on a drive image or physical drive
To store a large number of data and information
Use to access the encrypted file system
Increase the chance of making mistakes

Question 6 of 10

6. Question

Which of the following demonstrates the challenges of using Linux as a forensic tool in analyzing a disk image?

It has a GUI interface at the command line
An odd number of sectors are unable to recognize by Linux
It only able to store volatile data
The devices can not be written at all times

Question 7 of 10

7. Question

Which of the following evidence search functionality is provided by Autopsy Browser?

File listing
Meta Data Analysis
Date and time of an image taken
The 6 months CCTV record

Question 8 of 10

8. Question

Which of the following functions designed by Autopsy for case management?

Image integrity
File Deletion
File duplication
The details of the file

Question 9 of 10

9. Question

What does the concept of image steganography mean?

To place information inside a host file
To hide information in the form of an image
A secret message used to cover a file
To modify the least significant bit method

Question 10 of 10

10. Question

What is the main intention of using watermarking in the data or information?

To protect the intellectual property right of the data or information
To personalized the image
To increase the exposure of company branding
To avoid the data or information being easily detected

CHFI Computer Hacking Forensic Investigator Quiz 09

Quiz-summary

Information

Results

Categories