Online Access Free Digital-Forensics-in-Cybersecurity Exam Questions

An organization has identified a system breach and has collected volatile data from the system.
Which evidence type should be collected next?

• A.File timestamps
• B.Network connections
• C.Running processes
• D.Temporary data

A digital forensic examiner receives a computer used in a hacking case. The examiner is asked to extract information from the computer's Registry.
How should the examiner proceed when obtaining the requested digital evidence?

• A.Enlist a colleague to witness the investigative process
• B.Ensure that any tools and techniques used are widely accepted
• C.Investigate whether the computer was properly seized
• D.Download a tool from a hacking website to extract the data

The chief information security officer of a company believes that an attacker has infiltrated the company's network and is using steganography to communicate with external sources. A security team is investigating the incident. They are told to start by focusing on the core elements of steganography.
What are the core elements of steganography?

• A.Payload, carrier, channel
• B.File, metadata, header
• C.Hash, nonce, salt
• D.Encryption, decryption, key

A user at a company attempts to hide the combination to a safe that stores confidential information in a data file called vacationdetails.doc.
What is vacationdetails.doc called, in steganographic terms?

• A.Channel
• B.Snow
• C.Carrier
• D.Payload

Which method is used to implement steganography through pictures?

• A.Encrypting image pixels
• B.Least Significant Bit (LSB) insertion
• C.File compression
• D.Metadata alteration