Computer Hacking Forensic Investigator (CHFI)647 questions across 65 pages are complete and free, with no account or card.
647 questions in this bank
Free access · progress saved on this device
What is the slave device connected to the secondary IDE controller on a Linux OS referred to?
Answer: B
So, typically, a computer with IDE controller can accomodate 4 drives: /dev/hda (primary master), /dev/hdb (primary slave), /dev/hdc (secondary master), /dev/hdd (secondary slave).
Source: Adapted from community discussion — stickerbush1970
If you see the files Zer0.tar.gz and copy.tar.gz on a Linux system while doing an investigation, what can you conclude?
Answer: D
What type of attack sends SYN requests to a target system with spoofed IP addresses?
Answer: A
If you plan to startup a suspect's computer, you must modify the ___________ to ensure that you do not contaminate or alter data on the suspect's hard drive by booting to the hard drive.
Answer: B
You are asked to build a forensic lab and your manager has specifically informed you to use copper for lining the walls, ceilings, and floor. What is the main purpose of lining the walls, ceilings, and floor with copper?
Answer: D
What is the CIDR from the following screenshot?
Answer: D
FYI, (im 99% sure theres no one studying this exam that would need this info) /32 = 255.255.255.255, /24 = 255.255.255.0, /16 = 255.255.0.0, /8 = 255.0.0.0
Source: Adapted from community discussion — Ariel235788
You are working for a local police department that services a population of 1,000,000 people and you have been given the task of building a computer forensics lab. How many law-enforcement computer investigators should you request to staff the lab?
Answer: C
What technique is used by JPEGs for compression?
Answer: C
When obtaining a warrant, it is important to:
Answer: A
What file is processed at the end of a Windows XP boot to initialize the logon dialog box?
Answer: C
The correct answer is A, because the question is asking the file processed BEFORE the logon dialog box appears. Basically, they are asking the required file that is processed before winlogon.exe (the exe that shows the logon dialog box), which is ntoskrnl.exe. http://etutorials.org/Microsoft+Products/microsoft+windows+xp+professional+training+kit/Chapter+18+-+Modifying+and+Troubleshooting+the+Boot+Process/Lesson+1nbspUnderstanding+the+Boot+Process/
Source: Adapted from community discussion — ayaneru_inorin
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
312-49 practice, question 71. 647 questions available.
Version 1.0.0. How we source questions