Online Access Free 312-49 Practice Test

When performing a forensics analysis, what device is used to prevent the system from recording data on an evidence disk?

• A.a protocol analyzer
• B.a firewall
• C.a disk editor
• D.a write-blocker

Brian needs to acquire data from RAID storage. Which of the following acquisition methods is recommended to retrieve only the data relevant to the investigation?

• A.Bit-by-bit Acquisition
• B.Bit-stream disk-to-disk Acquisition
• C.Static Acquisition
• D.Sparse or Logical Acquisition

Which layer of iOS architecture should a forensics investigator evaluate to analyze services such as Threading, File Access, Preferences, Networking and high-level features?

• A.Core Services
• B.Core OS
• C.Media services
• D.Cocoa Touch

This organization maintains a database of hash signatures for known software.

• A.Institute of Electrical and Electronics Engineers
• B.National Software Reference Library
• C.International Standards Organization
• D.American National standards Institute

Area density refers to:

• A.the amount of data per disk
• B.the amount of data per platter
• C.the amount of data per square inch
• D.the amount of data per partition