Free GAQM Certified Forensic Analyst CFA-001 Exam Questions

You have been given the task to investigate web attacks on a Windows-based server.

Which of the following commands will you use to look at which sessions the machine has opened with other systems?

The Recycle Bin is located on the Windows desktop. When you delete an item from the hard disk, Windows sends that deleted item to the Recycle Bin and the icon changes to full from empty, but items deleted from removable media, such as a floppy disk or network drive, are not stored in the Recycle Bin.

What is the size limit for Recycle Bin in Vista and later versions of the Windows?

Which of the following statements is incorrect related to acquiring electronic evidence at crime scene?

Which wireless standard has bandwidth up to 54 Mbps and signals in a regulated frequency spectrum around 5 GHz?

Ever-changing advancement or mobile devices increases the complexity of mobile device examinations. Which or the following is an appropriate action for the mobile forensic investigation?

Email archiving is a systematic approach to save and protect the data contained in emails so that it can tie easily accessed at a later date.

Files stored in the Recycle Bin in its physical location are renamed as Dxy.ext, where, ''X'' represents the _________.

During first responder procedure you should follow all laws while collecting the evidence, and contact a computer forensic examiner as soon as possible

What is the First Step required in preparing a computer for forensics investigation?

International Mobile Equipment Identifier (IMEI) is a 15-dlgit number that indicates the manufacturer, model type, and country of approval for GSM devices. The first eight digits of an IMEI number that provide information about the model and origin of the mobile device is also known as:

Web applications provide an Interface between end users and web servers through a set of web pages that are generated at the server-end or contain script code to be executed dynamically within the client Web browser.

What is the smallest allocation unit of a hard disk?

What is a first sector ("sector zero") of a hard disk?

The ARP table of a router comes in handy for Investigating network attacks, as the table contains IP addresses associated with the respective MAC addresses.

The ARP table can be accessed using the __________command in Windows 7.

What is the goal of forensic science?