CHFI Study guides, Class notes & Summaries

CHFI Test 1 with 100% Verified Solutions | Already Graded 18 USC §1030 covers: - fraud and related activity in connection with computers This Federal statute covers child pornography. - 18 USC 2252A This rule involves rulings on evidence. - Rule 103 Sara is an Assistant U.S. Attorney. She knows that this rule covers the general admissibility of relevant evidence. - Rule 402 This person provides legal advice about the investigation and any potential legal issues in the forensic investiga...

A. #*06*# B. *#06# C. #06r D. *1MEI# - b Who is responsible for the following tasks? - Secure the scene and ensure that it is maintained In a secure state until the Forensic Team advises - Make notes about the scene that will eventually be handed over to the Forensic Team A. Non-Laboratory Staff B. System administrators C. Local managers or other non-forensic staff D. Lawyers - a A system with a simple logging mechanism has not been given much attention during development, this syst...

Anti-Digital Forensic techniques: - Overwriting data (Wiping). Exploitation of bugs in forensic tools. Obfuscation. Hiding Data (Steganography, Cryptography, low-tech...) Volatile Data - Can be modified, rapidly. Non-Volatile data - Secondary storage of data. Long term, persistent data. Transient Data - Programs that reside in memory and cache data. (i.e. network connection, user logout, ...) Fragile Data - Data temporarily saved to the hard disk and can be changed. (i.e. time stamps, ...

CHFI - Chapter 9 (Database Forensics) Latest Already Passed In SQL Server, how many .ndf files can there be? - 0,1 or many In SQL Server, how many .mdf files can there be? - 1 In SQL Server, how many .ldf files can there be? - 1 In SQL Server, how many components exist in a data page? - 3 (Page Header, Data Rows, Offset table) In SQL Server, what is the minimum storage unit - 8kb Name a tool to review SQL Server logs - ApexSQL Audit Which parameter will you use with sqlcmd to initiat...

CHFI- TEST with 100% Verified Solutions | Already Passed GUIDs are displayed as how many hexadecimal digits with groups separated by hyphens? 64 128 32 256 - 32 What is a standard partitioning scheme for hard disks and part of the Unified Extensible Firmware Interface? UEFI Partition Table (UPT) Universal Partition Table (UPT) General Partition Table (GPT) GUID Partition Table (GPT) - GUID Partition Table (GPT) How many bytes is each logical block in GPT? 256 128 512 1024 - 5...

CHFI - Chapter 7 (Network Forensics) Practice Questions with 100% Verified Solutions In this type of attack, the attacker sends messages to the computer with an address that indicates the messages are coming from a trusted host. - IP Address Spoofing This is the process of gathering information about a network that may help in an attacking the network. - Enumeration This attack refers to the exploitation of a session-token generation mechanism or token security controls, such that th...

CHFI-5 Questions and Answers with 100% Correct Solutions What information do you need to recover when searching a victim's computer for a crime committed with specific e-mail message? A. Internet service provider information B. E-mail header C. Username and password D. Firewall log - E-mail header Melanie was newly assigned to an investigation and asked to make a copy of all the evidence from the compromised system. Melanie did a DOS copy of all the files on the system. What woul...

CHFI - Chapter 3 (Hard Disks and File Systems) Test 100% Solved This RAID architecture uses Byte level stripping with a dedicated parity disk - RAID 3 This RAID architecture does not use any parity, striping or mirrioring - RAID 2 This RAID architecture uses Hamming code and ECC - RAID 2 This RAID architecture provides the best performance of the single RAID levels but does not providing mirroring - RAID 0 This RAID architecture uses disk mirroring and copies data to multiple disks at ...

CHFI - Chapter 3 (Hard Disks and File Systems) Test 100% Solved This RAID architecture uses Byte level stripping with a dedicated parity disk - RAID 3 This RAID architecture does not use any parity, striping or mirrioring - RAID 2 This RAID architecture uses Hamming code and ECC - RAID 2 This RAID architecture provides the best performance of the single RAID levels but does not providing mirroring - RAID 0 This RAID architecture uses disk mirroring and copies data to multiple disks at ...

CHFI - Chapter 9 (Database Forensics) Latest Already Passed In SQL Server, how many .ndf files can there be? - 0,1 or many In SQL Server, how many .mdf files can there be? - 1 In SQL Server, how many .ldf files can there be? - 1 In SQL Server, how many components exist in a data page? - 3 (Page Header, Data Rows, Offset table) In SQL Server, what is the minimum storage unit - 8kb Name a tool to review SQL Server logs - ApexSQL Audit Which parameter will you use with sqlcmd to initiat...