Digital-Forensics-in-Cybersecurity無料問題集「WGU Digital Forensics in Cybersecurity (D431/C840) Course」

質問 1

Which file stores local Windows passwords in the Windows\System32\ directory and is subject to being cracked by using a live CD?

（A）SAM

（B）Ntidr

（C）HAL

（D）IPSec

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

While collecting digital evidence from a running computer involved in a cybercrime, the forensic investigator makes a list of items that need to be collected.
Which piece of digital evidence should be collected first?

（A）Chat room logs

（B）Temporary Internet files

（C）Security logs

（D）Recently accessed files

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

The chief executive officer (CEO) of a small computer company has identified a potential hacking attack from an outside competitor.
Which type of evidence should a forensics investigator use to identify the source of the hack?

（A）Browser history

（B）Network transaction logs

（C）Email archives

（D）File system metadata

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Which law requires both parties to consent to the recording of a conversation?

（A）Electronic Communications Privacy Act (ECPA)

（B）Health Insurance Portability and Accountability Act (HIPAA)

（C）Wiretap Act

（D）Stored Communications Act

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

An organization is determined to prevent data leakage through steganography. It has developed a workflow that all outgoing data must pass through. The company will implement a tool as part of the workflow to check for hidden data.
Which tool should be used to check for the existence of steganographically hidden data?

（A）Data Doctor

（B）MP3Stego

（C）Snow

（D）Forensic Toolkit (FTK)

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

A forensic investigator is acquiring evidence from an iPhone.
What should the investigator ensure before the iPhone is connected to the computer?

（A）That the phone avoids syncing with the computer

（B）That the phone is in jailbreak mode

（C）That the phone has root privilege

（D）That the phone is powered off

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

An organization has identified a system breach and has collected volatile data from the system.
Which evidence type should be collected next?

（A）Running processes

（B）File timestamps

（C）Temporary data

（D）Network connections

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

What are the three basic tasks that a systems forensic specialist must keep in mind when handling evidence during a cybercrime investigation?

（A）Find evidence, preserve evidence, and prepare evidence

（B）Analyze evidence, prepare evidence, and document evidence

（C）Preserve evidence, encrypt evidence, and delete evidence

（D）Find evidence, analyze evidence, and prosecute evidence

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

Digital-Forensics-in-Cybersecurity 無料問題集「WGU Digital Forensics in Cybersecurity (D431/C840) Course」

弊社を連絡する

関連リンク

トップ試験