- (Topic 2)
Why should you never power on a computer that you need to acquire digital evidence from?

1. A. When the computer boots up, files are written to the computer rendering the data nclean?When the computer boots up, files are written to the computer rendering the data ?nclean
2. B. When the computer boots up, the system cache is cleared which could destroy evidence
3. C. When the computer boots up, data in the memory buffer is cleared which could destroy evidenceWhen the computer boots up, data in the memory? buffer is cleared which could destroy evidence
4. D. Powering on a computer has no affect when needing to acquire digital evidence from it

Correct Answer: A

- (Topic 1)
Raw data acquisition format creates ____ of a data set or suspect drive.

1. A. Simple sequential flat files
2. B. Segmented files
3. C. Compressed image files
4. D. Segmented image files

Correct Answer: A

- (Topic 2)
If a PDA is seized in an investigation while the device is turned on, what would be the proper procedure?

1. A. Keep the device powered on
2. B. Turn off the device immediately
3. C. Remove the battery immediately
4. D. Remove any memory cards immediately

Correct Answer: A

- (Topic 3)
When a router receives an update for its routing table, what is the metric value change to that path?

1. A. Increased by 2
2. B. Decreased by 1
3. C. Increased by 1
4. D. Decreased by 2

Correct Answer: C

- (Topic 1)
How do you define Technical Steganography?

1. A. Steganography that uses physical or chemical means to hide the existence of a message
2. B. Steganography that utilizes written natural language to hide the message in the carrier in some non-obvious ways
3. C. Steganography that utilizes written JAVA language to hide the message in the carrier in some non-obvious ways
4. D. Steganography that utilizes visual symbols or signs to hide secret messages

Correct Answer: A