One technique for hiding information is to change the file extension from the correct one to the one that might not be noticed by an investigator. For example, changing a .jpg extension to a .doc extension so that a picture file appears to be a document. What can an investigator examine to verify that a file has the correct extension?

• A.The file footer
• B.The File Allocation Table
• C.The file header
• D.The sector map

Comment: *

Name: *

Email: *

Verification: *

What is the first step taken in an investigation for laboratory forensic staff members?

• A.Conducting preliminary interviews
• B.Securing and evaluating the electronic crime scene
• C.Transporting the electronic evidence
• D.Packaging the electronic evidence

Comment: *

Name: *

Email: *

Verification: *

What does the acronym POST mean as it relates to a PC?

• A.Primary Operating System Test
• B.Primary Operations Short Test
• C.Power On Self Test
• D.Pre Operational Situation Test

Comment: *

Name: *

Email: *

Verification: *

On an Active Directory network using NTLM authentication, where on the domain controllers are the passwords stored?

• A.AMS
• B.SAM
• C.Shadow file
• D.Password.conf

Comment: *

Name: *

Email: *

Verification: *

Which of the following tool enables a user to reset his/her lost admin password in a Windows system?

• A.Active@ Password Changer
• B.Smartkey Password Recovery Bundle Standard
• C.Passware Kit Forensic
• D.Advanced Office Password Recovery

Comment: *

Name: *

Email: *

Verification: *