312-49v10 Certification Exam Questions with AI Explanations

QUESTION: 111

To preserve digital evidence, an investigator should ____________________.

Make two copies of each evidence item using a single imaging tool
Make a single copy of each evidence item using an approved imaging tool
Make two copies of each evidence item using different imaging tools
Only store the original evidence item

Answer(s): C

Pro ling is a forensics technique for analyzing evidence with the goal of identifying the perpetrator from their various activity. After a computer has been compromised by a hacker, which of the following would be most important in forming a pro le of the incident?

The manufacturer of the system compromised
The logic, formatting and elegance of the code used in the attack
The nature of the attack
The vulnerability exploited in the incident

Answer(s): B

Reveal Solution Next Question

QUESTION: 113

Printing under a Windows Computer normally requires which one of the following les types to be created?

EME
MEM
EMF
CME

Answer(s): C

Reveal Solution Next Question

QUESTION: 114

An Expert witness give an opinion if:

The Opinion, inferences or conclusions depend on special knowledge, skill or training not within the ordinary experience of lay jurors
To de ne the issues of the case for determination by the nder of fact
To stimulate discussion between the consulting expert and the expert witness
To deter the witness form expanding the scope of his or her investigation beyond the requirements of the case

Answer(s): A

Reveal Solution Next Question