Click Designs
Final quiz · 20 questions

IT Forensics Essentials — Final Quiz

Answer all 20 questions. Score 14 or more (70%) to receive your certificate. You can retake the quiz as many times as you like.

Check the spelling — the certificate can't be edited after it's issued.
Question 1 of 20Chapter 1What are the three general steps of the computer forensics process?
Question 2 of 20Chapter 1What is a forensic image?
Question 3 of 20Chapter 2What is the chain of custody?
Question 4 of 20Chapter 2According to the book, how can computers figure in a crime?
Question 5 of 20Chapter 2What is the difference between a physical and a logical copy of a drive?
Question 6 of 20Chapter 2Why is the MD5 hash algorithm considered weaker than SHA-1 and SHA-2?
Question 7 of 20Chapter 2What is slack space?
Question 8 of 20Chapter 2Why must investigators be careful before switching off a suspect computer?
Question 9 of 20Chapter 2What is FTK Imager used for, as described in the book?
Question 10 of 20Chapter 3What does DFIR stand for?
Question 11 of 20Chapter 3In incident response, what does the Preparation phase involve?
Question 12 of 20Chapter 5What is a brute-force attack on a password?
Question 13 of 20Chapter 5What is file carving?
Question 14 of 20Chapter 6Which practice helps address ethical issues such as bias and evidence tampering?
Question 15 of 20Chapter 7What is the primary function of a write-blocker?
Question 16 of 20Chapter 8In the book's cyber security terminology, what does “threat” describe?
Question 17 of 20Chapter 8What made the Stuxnet attack so effective?
Question 18 of 20Chapter 10What is ProDiscover?
Question 19 of 20Chapter 13When presenting forensic findings in court, what does the book recommend?
Question 20 of 20Chapter 14In the BTK Killer case, what evidence led investigators to Dennis Rader?
0 of 20 answered