Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. GAQM
  5. CFA-001

GAQM CFA-001 Exam Questions
Certified Forensic Analyst (Page 4 )

Updated On: 21-Feb-2026
Page 4 of 37
PDF with 180 Questions

FAT32 is a 32-bit version of FAT file system using smaller clusters and results in efficient storage capacity.
What is the maximum drive size supported?

  1. 1 terabytes
  2. 2 terabytes
  3. 3 terabytes
  4. 4 terabytes

Answer(s): B



In which step of the computer forensics investigation methodology would you run MD5 checksum on the evidence?

  1. Obtain search warrant
  2. Evaluate and secure the scene
  3. Collect the evidence
  4. Acquire the data

Answer(s): D



Network forensics allows Investigators to inspect network traffic and logs to identify and locate the attack system. Network forensics can reveal: (Select three answers)

  1. Source of security incidents' and network attacks
  2. Path of the attack
  3. Intrusion techniques used by attackers
  4. Hardware configuration of the attacker's system

Answer(s): A,B,C



Determine the message length from following hex viewer record:

  1. 6E2F
  2. 13
  3. 27
  4. 810D

Answer(s): D



TCP/IP (Transmission Control Protocol/Internet Protocol) is a communication protocol used to connect different hosts in the Internet. It contains four layers, namely the network interface layer. Internet layer, transport layer, and application layer.
Which of the following protocols works under the transport layer of TCP/IP?

  1. UDP
  2. HTTP
  3. FTP
  4. SNMP

Answer(s): A






Post your Comments and Discuss GAQM CFA-001 exam dumps with other Community members:

Join the CFA-001 Discussion