Question 171 · 647 in bank
An Expert witness give an opinion if:
Show answer
Answer: A
Computer Hacking Forensic Investigator (CHFI)647 questions across 65 pages are complete and free, with no account or card.
647 questions in this bank
Free access · progress saved on this device
An Expert witness give an opinion if:
Answer: A
An attacker has compromised a cloud environment of a company and used the employee information to perform an identity theft attack. Which type of attack is this?
Answer: A
In which implementation of RAID will the image of a Hardware RAID volume be different from the image taken separately from the disks?
Answer: D
From Wikipedia: https://en.wikipedia.org/wiki/Standard_RAID_levels Raid 1 makes an exact mirrored copy, so all the disks in the RAID will be identical, logically talking. RAID 0 (also known as a stripe set or striped volume) splits ("stripes") data evenly across two or more disks, so all the disk will be different each other, and different from the HW RAID image. Think, answer should be C
Source: Adapted from community discussion — Bodescu
Robert needs to copy an OS disk snapshot of a compromised VM to a storage account in different region for further investigation. Which of the following should he use in this scenario?
Answer: B
One technique for hiding information is to change the file extension from the correct one to the one that might not be noticed by an investigator. For example, [1] extension?
Answer: A
Question should read "One technique for hiding information is to change the file extension from the correct one to one that might not be noticed by an investigator. For example, changing a .jpg extension to a .doc extension so that a picture file appears to be a document. What can an investigator examine to verify that a file has the correct extension?"
Source: Adapted from community discussion — memmaker
During the trial, an investigator observes that one of the principal witnesses is severely ill and cannot be present for the hearing. He decides to record the evidence and present it to the court. Under which rule should he present such evidence?
Answer: B
Chong-lee, a forensics executive, suspects that a malware is continuously making copies of files and folders on a victim system to consume the available disk space. What type of test would confirm his claim?
Answer: D
What is the name of the first reserved sector in File allocation table?
Answer: C
Reserved Area: The first reserved sector is the Volume Boot Record or VBR, which comprises the BIOS Parameter Block (BPB) containing basic file system information, such as type of file system and pointers to the position of the other sections as well as the operating system's boot loader code. Correct answer A
Source: Adapted from community discussion — giangvd
For what purpose do the investigators use tools like iPhoneBrowser, iFunBox, OpenSSHSSH, and iMazing?
Answer: A
I think A is correct, book said: Title of the slide: "Bypassing the iPhone Passcode Using IExplorer", in footer: In addition to this, tools like iPhoneBrowser, iFunBox, OpenSSHSSH and iMazing also help in bypassing the passcode
Source: Adapted from community discussion — alvaroestebancta
What is the capacity of Recycle bin in a system running on Windows Vista?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
312-49 practice, question 171. 647 questions available.
Version 1.0.0. How we source questions