- (Exam Topic 4)
Which "Standards and Criteria" under SWDGE states that "the agency must use hardware and software that are appropriate and effective for the seizure or examination procedure"?

1. A. Standards and Criteria 1.7
2. B. Standards and Criteria 1.6
3. C. Standards and Criteria 1.4
4. D. Standards and Criteria 1.5

Correct Answer: D

- (Exam Topic 3)
The given image displays information about date and time of installation of the OS along with service packs, patches, and sub-directories. What command or tool did the investigator use to view this output?

1. A. dir /o:d
2. B. dir /o:s
3. C. dir /o:e
4. D. dir /o:n

Correct Answer: A

- (Exam Topic 2)
Jacky encrypts her documents using a password. It is known that she uses her daughter’s year of birth as part of the password. Which password cracking technique would be optimal to crack her password?

1. A. Rule-based attack
2. B. Brute force attack
3. C. Syllable attack
4. D. Hybrid attack

Correct Answer: A

- (Exam Topic 4)
During a forensic investigation, a large number of files were collected. The investigator needs to evaluate ownership and accountability of those files. Therefore, he begins to Identify attributes such as "author name," "organization name." "network name," or any additional supporting data that is meant for the owner's Identification purpose. Which term describes these attributes?

1. A. Data header
2. B. Data index
3. C. Metabase
4. D. Metadata

Correct Answer: D

- (Exam Topic 2)
If a PDA is seized in an investigation while the device is turned on, what would be the proper procedure?

1. A. Keep the device powered on
2. B. Turn off the device immediately
3. C. Remove the battery immediately
4. D. Remove any memory cards immediately

Correct Answer: A