Certified Forensic Analyst (CFA) (CFA-001) Free Practice Test

Question 1

Damaged portions of a disk on which no read/Write operation can be performed is known as ______________.

A. Lost sector

B. Bad sector

C. Empty sector

D. Unused sector

Correct Answer: B

Question 2

The status of the network interface cards (NICs) connected to a system gives information about whether the system is connected to a wireless access point and what IP address is being used. Which command displays the network configuration of the NICs on the system?

A. netstat

B. tasklist

C. net session

D. ipconfig /all

Correct Answer: D

Question 3

Quality of a raster Image is determined by the _________________and the amount of information in each pixel.

A. Total number of pixels

B. Image file size

C. Image file format

D. Compression method

Correct Answer: A

Question 4

Why is it Important to consider health and safety factors in the work carried out at all stages of the forensic process conducted by the forensic analysts?

A. Local law enforcement agencies compel them to wear latest gloves

B. This is to protect the staff and preserve any fingerprints that may need to be recovered at a later date

C. It is a part of ANSI 346 forensics standard

D. All forensic teams should wear protective latex gloves which makes them look professional and cool

Correct Answer: B

Question 5

Which of the following passwords are sent over the wire (and wireless) network, or stored on some media as it is typed without any alteration?

A. Obfuscated passwords

B. Hex passwords

C. Clear text passwords

D. Hashed passwords

Correct Answer: C

Question 6

Which of the following statements does not support the case assessment?

A. Identify the legal authority for the forensic examination request

B. Do not document the chain of custody

C. Review the case investigator,s request for service

D. Discuss whether other forensic processes need to be performed on the evidence

Correct Answer: B

Question 7

Which of the following commands shows you the username and IP address used to access the system via a remote login session and the Type of client from which they are accessing the system?

A. Net sessions

B. Net config

C. Net file

D. Net share

Correct Answer: A

Question 8

Which of the following steganography types hides the secret message in a specifically designed pattern on the document that is unclear to the average reader?

A. Open code steganography

B. Technical steganography

C. Visual semagrams steganography

D. Text semagrams steganography

Correct Answer: A

Question 9

According to US federal rules, to present a testimony in a court of law, an expert witness needs to furnish certain information to prove his eligibility. Jason, a qualified computer forensic expert who has started practicing two years back, was denied an expert testimony in a computer crime case by the US Court of Appeals for the Fourth Circuit in Richmond, Virgini a. Considering the US federal rules, what could be the most appropriate reason for the court to reject Jason's eligibility as an expert witness?

A. Being a computer forensic expert, Jason is not eligible to present testimony in a computer crime case

B. Jason was not aware of legal issues involved with computer crimes

C. Jason was unable to furnish documents to prove that he is a computer forensic expert

D. Jason was unable to furnish documents showing four years of previous experience in the field

Correct Answer: D

Question 10

BMP (Bitmap) is a standard file format for computers running the Windows operating system. BMP images can range from black and white (1 bit per pixel) up to 24 bit color (16.7 million colors). Each bitmap file contains header, the RGBQUAD array, information header, and image data. Which of the following element specifies the dimensions, compression type, and color format for the bitmap?

A. Header

B. The RGBQUAD array

C. Information header

D. Image data

Correct Answer: B

Welcome to TestSimulate

GAQM Certified Forensic Analyst (CFA) (CFA-001) Free Practice Test