Online Access Free Digital-Forensics-in-Cybersecurity Exam Questions

An employee sends an email message to a fellow employee. The message is sent through the company's messaging server.
Which protocol is used to send the email message?

• A.IMAP
• B.POP3
• C.SNMP
• D.SMTP

Which characteristic applies to solid-state drives (SSDs) compared to magnetic drives?

• A.They are generally slower
• B.They have a lower cost per gigabyte
• C.They have moving parts
• D.They are less susceptible to damage

A forensic scientist is examining a computer for possible evidence of a cybercrime.
Why should the forensic scientist copy files at the bit level instead of the OS level when copying files from the computer to a forensic computer?

• A.Copying files at the OS level fails to copy deleted files or slack space.
• B.Copying files at the OS level will copy extra information that is unnecessary.
• C.Copying files at the OS level changes the timestamp of the files.
• D.Copying files at the OS level takes too long to be practical.

Which type of information does a Windows SAM file contain?

• A.Encrypted network passwords
• B.Encrypted local Windows passwords
• C.Hash of network passwords
• D.Hash of local Windows passwords

On which file does the Windows operating system store hashed passwords?

• A.System
• B.NTUSER.dat
• C.SAM
• D.Kerberos