Free 312-49v11 Exam Braindumps
Computer Hacking Forensic Investigator Questions 66–70 (page: 15)

Before accessing digital evidence from victims, witnesses, or suspects, on their electronic devices, what should the investigator do first to respect legal privacy requirements?

During a forensic investigation, a large number of files were collected. The investigator needs to evaluate ownership and accountability of those files. Therefore, he begins to identify attributes such as "author name," "organization name," "network name," or any additional supporting data that is meant for the owner's identification purpose.
Which term describes these attributes?

Derrick, a forensic specialist, was investigating an active computer that was executing various processes. Derrick wanted to check whether this system was used in an incident that occurred earlier. He started inspecting and gathering the contents of RAM, cache, and DLLs to identify incident signatures. Identify the data acquisition method employed by Derrick in the above scenario.

When analyzing logs, it is important that the clocks of all the network devices are synchronized.
Which protocol will help in synchronizing these clocks?

What happens to the header of the file once it is deleted from the Windows OS file systems?