WGU C840 Practice Assessment: Digital Forensics in Cybersecurity (2023/ 2024 Update) Questions and Verified Answers| 100% Correct
WGU C840 Practice Assessment: Digital
Forensics in Cybersecurity (2023/ 2024
Update) Questions and Verified Answers|
100% Correct
QUESTION
Which Windows password cracking tool uses rainbow tables?
Answer:
Ophcrack
QUESTION
How does a rainbow table work to crack a password?
Answer:
It uses a table of all possible keyboard combinations and their hash values, then searches for a
match.
QUESTION
What should a forensic investigator use to gather the most reliable routing information for
tracking an email message?
Answer:
Email header
QUESTION
Which activity involves email tracing?
Answer:
Determining the ownership of the source email server
QUESTION
A forensic examiner reviews a laptop running OS X which has been compromised. The examiner
wants to know if there were any mounted volumes created from USB drives. Which digital
evidence should be reviewed?
Answer:
/var/log
QUESTION
Which log or folder contains information about printed documents on a computer running Mac
OS X?
Answer:
/var/spool/cups
QUESTION
Which Windows event log should be checked for evidence of invalid logon attempts?
Answer:
Security
QUESTION
A cyber security organization has issued a warning about a cybercriminal who is using a known
vulnerability to attack unpatched corporate Macintosh systems. A network administrator decides
to examine the software updates logs on a Macintosh system to ensure the system has been
patched. Which folder contains the software updates logs?
Answer:
/Library/Receipts
QUESTION
A forensic investigator wants to image an older BlackBerry smartphone running OS 7.0.Which
tool should the investigator use?
Answer:
BlackBerry Desktop Manager
QUESTION
An investigator wants to extract information from a mobile device by connecting it to a
computer. What should the investigator take great care to ensure?
Answer:
That the mobile device does not synchronize with the computer
QUESTION
Which state is a device in if it is powered on, performing tasks, and able to be manipulated by
the user?
Answer:
Active
QUESTION
Evidence need not be locked if it is at a police station.
Answer:
False
QUESTION
Evidence need not be locked if it is at a police station.
Answer:
False
Powered by https://learnexams.com/search/study?query=