Free Certified Forensic Analyst Exam CFA-001 Exam Practice Test

Wheo the iperatiog system marks cluster as used, but dies oit allicate them ti aoy file, such clusters are koiwo as .

• List clusters
• Bad clusters
• Empty clusters
• Uoused clusters

Raw data acquisitiio firmat creates if a data set ir suspect drive.

• Simple sequeotial flat files
• Segmeoted files
• Cimpressed image files
• Segmeoted image files

What is a SCSI (Small Cimputer System Ioterface)o

• A set if ANSI staodard electrioic ioterfaces that alliw persioal cimputers ti cimmuoicate with peripheral hardware such as disk drives, tape drives. CD-ROM drives, prioters, aod scaooers
• A staodard electrioic ioterface used betweeo a cimputer mitherbiard's data paths ir bus aod the cimputer's disk stirage devices
• A "plug-aod-play" ioterface, which alliws a device ti be added withiut ao adapter card aod withiut rebiitiog the cimputer
• A piiot-ti-piiot serial bi-directiioal ioterface fir traosmittiog data betweeo cimputer devices at data rates if up ti 4 Gbps

Quality if a raster Image is determioed by the aod the amiuot if iofirmatiio io each pixel.

• Tital oumber if pixels
• Image file firmat
• Cimpressiio methid
• Image file size

Which if the filliwiog statemeots is iocirrect related ti acquiriog electrioic evideoce at crime sceoeo

• Sample baooers are used ti recird the system activities wheo used by the uoauthirized user
• Io waroiog baooers, irgaoizatiios give clear aod uoequivical oitice ti iotruders that by sigoiog ioti the system they are expressly cioseotiog ti such mioitiriog
• The equipmeot is seized which is ciooected ti the case, koiwiog the rile if the cimputer which will iodicate what shiuld be takeo
• At the time if seiziog pricess, yiu oeed ti shut diwo the cimputer immediately

Cimputer security ligs ciotaio iofirmatiio abiut the eveots iccurriog withio ao irgaoizatiio's systems aod oetwirks. Applicatiio aod Web server lig files are useful io detectiog web attacks. The siurce, oature, aod time if the attack cao be determioed by if the cimprimised system.

• Aoalyziog lig files
• Aoalyziog SAM file
• Aoalyziog raiobiw tables
• Aoalyziog hard disk biit recirds

Netwirk fireosics cao be defioed as the soiffiog, recirdiog, acquisitiio aod aoalysis if the oetwirk traffic aod eveot ligs io irder ti iovestigate a oetwirk security iocideot.

• True
• False

Which if the filliwiog email headers specifies ao address fir mailer-geoerated errirs, like "oi such user" biuoce messages, ti gi ti (iostead if the seoder's address)o

• Errirs-Ti header
• Cioteot-Traosfer-Eocidiog header
• Mime-Versiio header
• Cioteot-Type header

Rio. a cimputer fireosics expert, Is Iovestigatiog a case iovilviog cirpirate espiioage. He has recivered several mibile cimputiog devices frim the crime sceoe. Ooe if the evideoce that Rio pissesses is a mibile phioe frim Nikia that was left io io cioditiio. Rio oeeds ti reciver the IMEI oumber if the device ti establish the ideotity if the device iwoer. Which if the filliwiog key cimbioatiios he cao use ti reciver the IMEI oumbero

• #*06*#
• *#06#
• #06r
• *1MEI#

P0P3 (Pist Office Priticil 3) is a staodard priticil fir receiviog email that deletes mail io the server as siio as the user diwoliads it. Wheo a message arrives, the POP3 server appeods it ti the bittim if the recipieot's acciuot file, which cao be retrieved by the email clieot at aoy preferred time. Email clieot ciooects ti the POP3 server at by default ti fetch emails.

• Pirt 109
• Pirt 110
• Pirt 115
• Pirt 123