Windows identifies which application to open a file with by examining which of the following?

• A.The File extension
• B.The file Signature at the end of the file
• C.The file attributes
• D.The file signature at the beginning of the file

Comment: *

Name: *

Email: *

Verification: *

What will the following Linux command accomplish? dd if=/dev/mem
of=/home/sam/mem.bin bs=1024

• A.Copy the master boot record to a file
• B.Copy the running memory to a file
• C.Copy the contents of the system folder em?to a fileCopy the contents of the system folder ?em?to a file
• D.Copy the memory dump file to an image file

Comment: *

Name: *

Email: *

Verification: *

You have used a newly released forensic investigation tool, which doesn't meet the
Daubert Test, during a case. The case has ended-up in court. What argument could the defense make to weaken your case?

• A.You are not certified for using the tool
• B.Only the local law enforcement should use the tool
• C.The total has not been reviewed and accepted by your peers
• D.The tool hasn't been tested by the International Standards Organization (ISO)

Comment: *

Name: *

Email: *

Verification: *

Which of the following tool creates a bit-by-bit image of an evidence media?

• A.AccessData FTK lmager
• B.Xplico
• C.Recuva
• D.FileMerlin

Comment: *

Name: *

Email: *

Verification: *

Which of the following tool enables a user to reset his/her lost admin password in a Windows system?

• A.Smartkey Password Recovery Bundle Standard
• B.Advanced Office Password Recovery
• C.Passware Kit Forensic
• D.Active@ Password Changer

Comment: *

Name: *

Email: *

Verification: *