CHFI Study guides, Class notes & Summaries

CHFI study guide Completed with 100% Verified Solutions What is the first step required in preparing a computer for forensics investigation? - Do not turn the computer off or on, run any programs, or attempt to access data on a computer.

CHFI: Hard Disks & File Systems Questions and Answers 100% Solved HDD - (Hard Drive Disk) non-volatile, records data magnetically SSD - (Solid State Drive) solid-state memory, uses microchips, expensive, supports a restricted number of writes over the life of the device Two memories: NAND-based flash memory; (retains memory even w/o power) Volatile RAM (faster access) Disk drive types - - Magnetic storage devices (e.g., floppy disks, magnetic tapes)

CHFI - Chapter 3 (Hard Disks and File Systems) Test Questions and Answers 100% Solved This RAID architecture uses Byte level stripping with a dedicated parity disk - RAID 3 This RAID architecture does not use any parity, striping or mirrioring - RAID 2 This RAID architecture uses Hamming code and ECC - RAID 2 This RAID architecture provides the best performance of the single RAID levels but does not providing mirroring - RAID 0 This RAID architecture uses disk mirroring and copies...

CHFI-11 Questions and Answers 100% Solved Which of the following commands shows you all of the network services running on Windowsbased servers? Net start Net use Net Session Net share - Answer: A QUESTION 2 Data compression involves encoding the data to take up less storage space and less bandwidth for transmission. It helps in saving cost and high data manipulation in many business applications. Which data compression technique maintains data integrity? Lossless compre...

CHFI- TEST QUESTIONS AND ANSWERS 100% SOLVED GUIDs are displayed as how many hexadecimal digits with groups separated by hyphens? 64 128 32 256 - 32 What is a standard partitioning scheme for hard disks and part of the Unified Extensible Firmware Interface? UEFI Partition Table (UPT) Universal Partition Table (UPT) General Partition Table (GPT) GUID Partition Table (GPT) - GUID Partition Table (GPT) How many bytes is each logical block in GPT?

CHFI - Chapter 3 (Hard Disks and File Systems) Test Questions and Answers 100% Solved This RAID architecture uses Byte level stripping with a dedicated parity disk - RAID 3 This RAID architecture does not use any parity, striping or mirrioring - RAID 2 This RAID architecture uses Hamming code and ECC - RAID 2 This RAID architecture provides the best performance of the single RAID levels but does not providing mirroring - RAID 0 This RAID architecture uses disk mirroring and copies...

CHFI-5 Questions and Answers 100% Solved What information do you need to recover when searching a victim's computer for a crime committed with specific e-mail message? Internet service provider information E-mail header Username and password Firewall log - E-mail header Melanie was newly assigned to an investigation and asked to make a copy of all the evidence from the compromised system. Melanie did a DOS copy of all the files on the system. What would be the primary reason ...

CHFI - Chapter 7 (Network Forensics) Practice Questions and Answers 100% Solved In this type of attack, the attacker sends messages to the computer with an address that indicates the messages are coming from a trusted host. - IP Address Spoofing This is the process of gathering information about a network that may help in an attacking the network. - Enumeration This attack refers to the exploitation of a session-token generation mechanism or token security controls, such that the ...

CHFI - Chapter 9 (Database Forensics) Questions and Answers Latest Update 100% Solved In SQL Server, how many .ndf files can there be? - 0,1 or many In SQL Server, how many .mdf files can there be? - 1 In SQL Server, how many .ldf files can there be? - 1 In SQL Server, how many components exist in a data page? - 3 (Page Header, Data Rows, Offset table) In SQL Server, what is the minimum storage unit - 8kb Name a tool to review SQL Server logs - ApexSQL Audit

CHFI Module 1 Questions & Answers Latest update 100% Solved Forensic science - Forensic science is the practical application of various varieties of science for answering legal system-related questions. It is related to criminal and civil actions. Forensic science is generally referred to as 'forensics', which in Latin means "of or before the forum". In the modern age, it refers to a process of gaining criminal evidences to be admitted in a court of law. Overview of Computer for...