GAQM Certified Forensic Analyst (CFA) - CFA-001 Exam Practice Test
Shortcuts are the files with the extension .Ink that are created and are accessed by the users. These files provide you with information about:
Correct Answer: A
Vote an answer
Hash injection attack allows attackers to inject a compromised hash into a local session and use the hash to validate network resources.
Correct Answer: B
Vote an answer
SIM is a removable component that contains essential information about the subscriber. It has both volatile and non-volatile memory. The file system of a SIM resides in _____________ memory.
Correct Answer: B
Vote an answer
Which of the following steganography types hides the secret message in a specifically designed pattern on the document that is unclear to the average reader?
Correct Answer: D
Vote an answer
Which is not a part of environmental conditions of a forensics lab?
Correct Answer: C
Vote an answer
Which of the following log injection attacks uses white space padding to create unusual log entries?
Correct Answer: A
Vote an answer
During first responder procedure you should follow all laws while collecting the evidence, and contact a computer forensic examiner as soon as possible
Correct Answer: B
Vote an answer
Physical security recommendations: There should be only one entrance to a forensics lab
Correct Answer: B
Vote an answer
Data compression involves encoding the data to take up less storage space and less bandwidth for transmission. It helps in saving cost and high data manipulation in many business applications.
Which data compression technique maintains data integrity?
Which data compression technique maintains data integrity?
Correct Answer: A
Vote an answer
When collecting evidence from the RAM, where do you look for data?
Correct Answer: A
Vote an answer
In what circumstances would you conduct searches without a warrant?
Correct Answer: A
Vote an answer
Under no circumstances should anyone, with the exception of qualified computer forensics personnel, make any attempts to restore or recover information from a computer system or device that holds electronic information.
Correct Answer: B
Vote an answer
When the operating system marks cluster as used, but does not allocate them to any file, such clusters are known as ___________.
Correct Answer: B
Vote an answer