Question 381 · 647 in bank
Which of the following is a MAC-based File Recovery Tool?
Show answer
Answer: C
Computer Hacking Forensic Investigator (CHFI)647 questions across 65 pages are complete and free, with no account or card.
647 questions in this bank
Free access · progress saved on this device
Which of the following is a MAC-based File Recovery Tool?
Answer: C
Smith, an employee of a reputed forensic investigation firm, has been hired by a private organization to investigate a laptop that is suspected to be involved in the hacking of the organization's DC server. Smith wants to find all the values typed into the Run box in the Start menu. Which of the following registry keys will Smith check to find the above information?
Answer: D
An International Mobile Equipment Identifier (IMEI) is a 15-digit number that indicates the manufacturer, model type, and country of approval for GSM devices. The first eight digits of an IMEI number that provide information about the model and origin of the mobile device is also known as:
Answer: A
Which of the following is NOT an anti-forensics technique?
Answer: A
Rusty, a computer forensics apprentice, uses the command nbtstat `"c while analyzing the network information in a suspect system. What information is he looking for?
Answer: C
During a cloud forensics collection in a Google Cloud environment, an examiner must programmatically enumerate objects within Cloud Storage buckets and selectively retrieve artifacts for preservation. The evidence collection process must integrate directly into a Python-based workflow used for automation and repeatable acquisition tasks. How should investigators access Cloud Storage to support this type of programmatic evidence collection?
Answer: C
Tasklist command displays a list of applications and services with their Process ID (PID) for all tasks running on either a local or a remote computer. Which of the following tasklist commands provides information about the listed processes, including the image name, PID, name, and number of the session for the process?
Answer: B
Which part of Metasploit framework helps users to hide the data related to a previously deleted file or currently unused by the allocated file.
Answer: D
Graphics Interchange Format (GIF) is a ____ RGB bitmap image format for images with up to 256 distinct colors per frame.
Answer: A
Hard disk data addressing is a method of allotting addresses to each _______ of data on a hard disk.
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
312-49 practice, question 381. 647 questions available.
Version 1.0.0. How we source questions