CASP+: Chapter 12 Forensics Workstation

Which commercial forensics tool is designed to run on the Windows Server?

• The Forensic Toolkit

• The Sleuth Kit

• Autopsy

• EnCase Forensic

What is the purpose of Autopsy in digital forensics?

• Endpoint investigation

• Digital evidence management

• Case management

• Disk imaging and file analysis

What is the main function of EnCase Forensic?

• Digital evidence management

• Endpoint investigation

• Case management

• Disk imaging and file analysis

Which forensics tool is an open-source collection of command line tools and programming libraries?

• EnCase Forensic

• The Forensic Toolkit

• Autopsy

• The Sleuth Kit

What is the minimum spec required for a forensics workstation?

• Single-processor system with limited memory

• Multi-processor system with ample memory

• Multi-processor system with limited memory

• Single-processor system with limited memory

What is the purpose of the Forensic Toolkit (FTK) from AccessData?

• Endpoint investigation

• Digital evidence management

• Investigation suite

• Case management

Which platform are most commercial forensics tools available for?

• Linux only

• Windows and Linux

• Windows only

• MacOS only

What is the main function of the Sleuth Kit?

• Disk imaging and file analysis

• Case management

• Endpoint investigation

• Digital evidence management

What is the purpose of a high-capacity disk subsystem in a forensics workstation?

• To process large files

• To connect drives to cables

• To access the Internet

• To save acquired images

What is the main function of Autopsy in digital forensics?

• Digital evidence management

• Endpoint investigation

• Case management

• Disk imaging and file analysis