Digital Forensics Quiz 6

An example of a Raw image is output from the UNIX/Linux__command

• dhex

• dd

• d2dump

• rawcp

__of data involves sorting and searching through all investigation data

• Validation

• Acquisition

• Reconstruction

• Discrimination

Many password recovery tools have a feature that allows generating potential lists for a_attack

• password dictionary

• birthday

• salting

• brute-force

The easiest way to duplicate a disk drive is to do a__copy from original disk to target disk

• partition-to-partition

• image-to-partition

• image-to-disk

• disk-to-disk

To complete a forensic disk analysis & examination,you need to create a__

• risk assessment

• budget plan

• report

• forensic disk copy

The first tools that analyzed & extracted data from disks were MS-DOS tools for_PC file systems

• Apple

• Atari

• IBM

• Commodore

In Windows 2000 & XP,the__command shows the file owner if there are many users on the system

• Dir

• Copy

• ls

• owner

A forensic workstation with a laptop & as many bays& peripherals as a stationary workstation is

• stationary workstation

• field workstation

• portable workstation

• lightweight workstation

Software forensics tools are commonly used to copy data from a suspect's disk drive to a(n)__

• image file

• recovery copy

• firmware

• backup file

Software/hardware that protects evidence disks by preventing writing of data to evidence disk

• Drive-imaging

• Workstations

• Disk editors

• Write-blockers