Online Access Free 312-49v9 Practice Test

When cataloging digital evidence, the primary goal is to

• A.Not allow the computer to be turned off
• B.Make bit-stream images of all hard drives
• C.Not remove the evidence from the scene
• D.Preserve evidence integrity

Which of the following is a non-zero data that an application allocates on a hard disk cluster in systems running on Windows OS?

• A.Slack Space
• B.Master File Table
• C.Sparse File
• D.Meta Block Group

How many sectors will a 125 KB file use in a FAT32 file system?

• A.16
• B.256
• C.32
• D.25

An employee is attempting to wipe out data stored on a couple of compact discs (CDs) and digital video discs (DVDs) by using a large magnet. You inform him that this method will not be effective in wiping out the data because CDs and DVDs are ______________ media used to store large amounts of data and are not affected by the magnet.

• A.magnetic
• B.logical
• C.anti-magnetic
• D.optical

Which cloud model allows an investigator to acquire the instance of a virtual machine and initiate the forensics examination process?

• A.PaaS model
• B.SaaS model
• C.SecaaS model
• D.IaaS model