Online Access Free GCFE Practice Test

What fundamental principle of digital forensics involves ensuring that the evidence remains unaltered from the time of collection to presentation in court?
Response:

• A.Systematic sampling
• B.Cross-validation
• C.Chain of custody
• D.Data reduction

In browser structure analysis, what is the significance of analyzing 'Local Storage' files in modern web browsers?
Response:

• A.They detail the browser's network security configurations.
• B.They provide insights into user-specific data stored by websites.
• C.They log user-installed applications and usage.
• D.They show changes to browser security levels.

In browser forensic analysis, what is the significance of examining the HTML5 Local Storage?
Response:

• A.It helps in identifying user-specific settings on websites.
• B.It provides a list of installed browser extensions.
• C.It contains the history of connected USB devices.
• D.It reveals the antivirus status.

How does examining 'startup folder contents' help in forensic investigations?
Response:

• A.It logs changes to power management settings.
• B.It tracks updates to the graphical user interface.
• C.It provides details on system backup schedules.
• D.It can reveal programs set to automatically start upon login, which might include malware or unauthorized software.

What role does the Master File Table (MFT) play in the forensic analysis of NTFS filesystems?
Response:

• A.It logs user login attempts and times.
• B.It details software installation processes.
• C.It contains metadata for each file and directory.
• D.It tracks changes to firewall settings.