Download New Liberty University CJUS 542 Test 2

Download New Liberty University CJUS 542 Test 2

Set 1

1. Which AccessData feature compares known file hash values to files on your evidence drive or image files to see whether they contain suspicious data?
2. Some notable UNIX distributions included Silicon Graphics, (SGI) IRIX, Santa Cruz Operation (SCO) UnixWare, Sun Solaris, IBM AIX, and HP-UX.
3. What technology is designed to recover encrypted data if users forget their passphrases or if the user key is corrupted after a system failure?
4. When intruders break into a network, they rarely leave a trail
5. Hardware manufacturers have designed most computer components to last about 36 months between
6. Type 2 hypervisors cannot be used on
7. What specifies the Windows XP path installation and contains options for selecting the Windows version?
8. What type of laws should computer investigators be especially aware of when working with image files in order to avoid infringement violations?
9. Briefly explain the NIST general approach for testing computer forensics
10. What should be created in order to begin a digital forensics case?
11. What are some of the steps for conducting a forensic analysis of virtual machines?
12. What term is used for the machines used in a DDoS attack?
13. On which OSI model layers do most packet analyzers operate?
14. In a file’s inode, what are the first 10 pointers called?
15. In the NTFS MFT, all files and folders are stored in separate records of how many bytes each.
16. What term refers to a column of tracks on two or more disk platters?
17. What technique has been used to protect copyrighted material by inserting digital watermarks into a file?
18. What are BitLocker’s current hardware and software requirements?
19. One way to examine a partition’s physical level is to use a disk editor, such as WinHex, or Hex
20. How does the Known File Filter program work?

Set 2

1. Which header starts with hexadecimal 49 49 2A and has an offset of four bytes of 5C 01 00 00 20 65 58 74 65 6E 64 65 64 20 03?
2. Summarize the evolution of FAT versions.
3. Which type of strategy hides the most valuable data at the innermost part of the network?
4. Network logs record traffic in and out of a network.
5. Match each item with a statement below
6. In which type of attack does the attacker keep asking the server to establish a connection?
7. If a graphics file is fragmented across areas on a disk, you must recover all the fragments before re-creating the file.
8. What are BitLocker’s current hardware and software requirements?
9. Before attempting to install a type 2 hypervisor, you need to enable virtualization in the BIOS before attempting to create a VM.
10. What enables the user to run another OS on an existing physical computer (known as the host computer) by emulating a computer’s hardware environment?
11. The HFS and HFS+ file systems have four descriptors for the end of a file (EOF).
12. Which filename refers to a core Win32 subsystem DLL file?
13. When intruders break into a network, they rarely leave a trail behind.
14. Briefly explain NTFS compressed files.
15. Briefly describe image examination methods for macOS.
16. Which filename refers to the device driver that allows the OS to communicate with SCSI or ATA drives that aren’t related to the BIOS?
17. Which data-hiding technique changes data from readable code to data that looks like binary executable code?
18. In macOS, in addition to allocation blocks, what kind of blocks do volumes have?
19. How may computer programs be registered under copyright laws?
20. How can you make sure a subject’s computer boots to a forensic floppy disk or CD?