D431 Digital Forensics in Cybersecurity - Set 3 - Part 1

Test your knowledge of technical writing concepts with these practice questions. Each question includes detailed explanations to help you understand the correct answers.

Question 1: What is the primary function of the Internet Message Access Protocol (IMAP)?

To send email

To receive email

To filter spam messages

To encrypt email communications

Question 2: What is a logic bomb?

A virus that spreads via email attachments

Malware that activates when specific conditions are met

A phishing attack that targets financial institutions

A type of ransomware used to lock files

Question 3: What is the purpose of a sniffer in network forensics?

To encrypt traffic on a network

To intercept and log network traffic for analysis

To scan for vulnerabilities in a system

To block incoming malware

Question 4: Which log is most important in tracking failed login attempts on a Windows system?

System log

Application log

Security log

Event log

Question 5: What is the function of the Post Office Protocol version 3 (POP3)?

To send emails

To receive emails

To store emails on a server permanently

To filter out spam emails

Question 6: Which of the following tools can be used to clone SIM cards?

Forensic SIM Cloner

Sleuth Kit

Pwnage

Autopsy

Question 7: What does the term "steganography" refer to?

The process of encrypting data

The process of hiding data within other data, such as images

The process of compressing data to reduce size

The process of decrypting a message

Question 8: What does a brute-force attack attempt to do?

Trick users into revealing their login credentials

Flood a server with requests to cause a denial of service

Try all possible combinations of keys or passwords to gain access

Inject malicious SQL commands into a database

Question 9: What type of malware attempts to avoid detection by performing its malicious actions sporadically?

Sparse infector virus

Logic bomb

Polymorphic virus

Armored virus

Question 10: What is the purpose of the "chain of custody" in digital forensics?

To ensure that evidence is collected legally

To encrypt the evidence for security

To track the handling of evidence from its collection to its presentation in court

To verify the authenticity of digital signatures

Question 11: What is an Advanced Forensic Format (AFF) file used for?

Storing digital signatures

Storing the metadata and data of forensic images

Encrypting evidence for secure storage

Creating virtual machines

Question 12: What does the term "sparse infector virus" refer to?

A virus that encrypts all data on a drive

A virus that infects only specific files or programs

A virus that avoids detection by acting sporadically

A virus that spreads through the internet

Question 13: What type of encryption uses the same key for both encryption and decryption?

Symmetric encryption

Asymmetric encryption

Block cipher

Stream cipher

Question 14: What is a polymorphic virus?

A virus that spreads across multiple machines simultaneously

A virus that changes its code to avoid detection

A virus that infects the BIOS of a system

A virus that remains dormant until triggered

Question 15: What is the primary purpose of forensic imaging in digital investigations?

To create a backup of a system for later use

To create a bit-by-bit copy of a storage device for analysis

To analyze network traffic in real time

To recover deleted files from a system

Question 16: What is "file slack" in digital forensics?

The space between the logical end of a file and the end of the allocated storage block

Unused memory in a system’s RAM

The unallocated space on a hard drive

The space used by the operating system for temporary files

Question 17: What is the function of the subscriber identity module (SIM) in mobile devices?

To encrypt all communication data on the device

To identify the phone with a user and a number

To store the operating system for the mobile device

To authenticate the mobile device to the network

Question 18: Which U.S. law governs the collection of GPS data from telecommunications services?

The Wireless Communications and Public Safety Act of 1999

The Communications Decency Act

The Sarbanes-Oxley Act

The Foreign Intelligence Surveillance Act

Question 19: What is the primary purpose of the Daubert standard in forensic investigations?

To determine the legality of a search

To ensure that evidence is handled correctly

To assess whether scientific testimony is based on valid reasoning and methodology

To encrypt digital evidence before it is presented in court

Question 20: What is the primary function of the GUID Partition Table (GPT)?

To encrypt the partitions of a hard drive

To track file allocations on a disk

To define how partitions are organized on modern hard drives

To store user credentials for disk encryption

Need Guaranteed Results?

Our exam support service guarantees you'll pass your OA on the first attempt. Pay only after you pass!

Get Exam Support