GAQM CFA-001 CFA Exam Questions Instant Access

Question 1

Under no circumstances should anyone, with the exception of qualified computer forensics personnel, make any attempts to restore or recover information from a computer system or device that holds electronic information.

ATrue

BFalse

Answer : A

Question 2

Which of the following password cracking techniques works like a dictionary attack, but adds some numbers and symbols to the words from the dictionary and tries to crack the password?

ABrute forcing attack

BHybrid attack

CSyllable attack

DRule-based attack

Answer : B

Question 3

Data files from original evidence should be used for forensics analysis

ATrue

BFalse

Answer : B

Question 4

A steganographic file system is a method to store the files in a way that encrypts and hides the data without the knowledge of others

ATrue

BFalse

Answer : A

Question 5

WPA2 provides enterprise and Wi-Fi users with stronger data protection and network access control which of the following encryption algorithm is used DVWPA2?

ARC4-CCMP

BRC4-TKIP

CAES-CCMP

DAES-TKIP

Answer : C

Question 6

Which root folder (hive) of registry editor contains a vast array of configuration information for the system, including hardware settings and software settings?

AHKEY_USERS

BHKEY_CURRENT_USER

CHKEY_LOCAL_MACHINE

DHKEY-CURRENT_CONFIG

Answer : C

Question 7

Email archiving is a systematic approach to save and protect the data contained in emails so that it can be accessed fast at a later date. There are two main archive types, namely Local Archive and Server Storage Archive. Which of the following statements is correct while dealing with local archives?

AIt is difficult to deal with the webmail as there is no offline archive in most cases. So consult your counsel on the case as to the best way to approach and gain access to the required data on servers

BLocal archives do not have evidentiary value as the email client may alter the message data

CLocal archives should be stored together with the server storage archives in order to be admissible in a court of law

DServer storage archives are the server information and settings stored on a local system whereas the local archives are the local email client information stored on the mail server

Answer : A

GAQM Certified Forensic Analyst CFA-001 CFA Exam Questions