Online Access Free Digital-Forensics-in-Cybersecurity Practice Test

On which file does the Windows operating system store hashed passwords?

• A.NTUSER.dat
• B.System
• C.Kerberos
• D.SAM

A forensic examiner is reviewing a laptop running OS X which has been compromised. The examiner wants to know if any shell commands were executed by any of the accounts.
Which log file or folder should be reviewed?

• A./var/vm
• B./var/log
• C./Users/<user>/Library/Preferences
• D./Users/<user>/.bash_history

Which directory contains the system's configuration files on a computer running Mac OS X?

• A./cfg
• B./var
• C./bin
• D./etc

Which U.S. law protects journalists from turning over their work or sources to law enforcement before the information is shared with the public?

• A.Communications Assistance to Law Enforcement Act (CALEA)
• B.The Privacy Protection Act (PPA)
• C.Electronic Communications Privacy Act (ECPA)
• D.Health Insurance Portability and Accountability Act (HIPAA)

Which universal principle must be observed when handling digital evidence?

• A.Make a copy and analyze the original
• B.Keep the evidence in a plastic bag
• C.Avoid making changes to the evidence
• D.Get the signatures of two witnesses