In their 2004 article, Meyers and Rogers listed three levels of excellence a good forensic ...
[html]In their 2004 article, Meyers and Rogers listed three levels of excellence a good forensic certification program should address. Which two of the following are on that list?
Your new forensic workstation came with two 10K-rpm SAS drives and two 7,400rpm drives. You should ...
Your new forensic workstation came with two 10K-rpm SAS drives and two 7,400rpm drives. You should install the OS onto the slower drives and save the faster drives for the data sets.
When selecting a suitable enclosure for a forensic workstation there are several factors to ...
[html]When selecting a suitable enclosure for a forensic workstation there are several factors to consider. Select some appropriate factors from the following list that are essential.
You recently upgraded the memory on your new forensic workstation. It was working fine before the ...
[html]You recently upgraded the memory on your new forensic workstation. It was working fine before the upgrade. Now, durning the boot process, the system encounters a "blue screen of death" and shuts down. You put the memory into another machine
The I/O subsystem of a forensic workstation is basically the same as with any other computer. The ...
[html]The I/O subsystem of a forensic workstation is basically the same as with any other computer. The one difference is that there must be some sort of ________ capability designed into the system.
There are several decisions to be made regarding the construction of a new forensic workstation that ...
[html]There are several decisions to be made regarding the construction of a new forensic workstation that will be dictated by the choice of system board. Which of the following are affected by the choice of system board?
Based on the published specifications that define a usable tool, if any I/O error occurs while ...
Based on the published specifications that define a usable tool, if any I/O error occurs while reading data, the tool must immediately abort the data capture event.
Microsoft provides a collection of free utilities for analyzing and troubleshooting problems ...
[html]Microsoft provides a collection of free utilities for analyzing and troubleshooting problems specific to the Windows operating system. These utilities are part of the ________ suite.
In order to pass the scrutiny of a judge a tool must pass four separate tests that provide a measure ...
In order to pass the scrutiny of a judge a tool must pass four separate tests that provide a measure of the scientific validity of the results. These tests are part of the ________ process.
As an experienced digital investigator, you have been called in to testify about the reliability of ...
[html]As an experienced digital investigator, you have been called in to testify about the reliability of the tool that was used to extract a forensic image. In your testimony you explain that you tested the utility against several ________.
Virtually all operating systems come with tools to manage the hard disk. The vast majority of these ...
[html]Virtually all operating systems come with tools to manage the hard disk. The vast majority of these tools are unable to read metafiles such as the $MFT file in Windows 7. Why is this?
▸ The $MFT file is actually not part of the file sys
