Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. GAQM
  5. CFA-001

GAQM CFA-001 Exam
Certified Forensic Analyst (Page 4 )

Updated On: 1-Feb-2026
Page 4 of 37
PDF with 180 Questions

Files stored in the Recycle Bin in its physical location are renamed as Dxy.ext, where, "X" represents the _________.

  1. Drive name
  2. Sequential number
  3. Original file name's extension
  4. Original file name

Answer(s): A



Tracks numbering on a hard disk begins at 0 from the outer edge and moves towards the center, typically reaching a value of ___________.

  1. 1023
  2. 1020
  3. 1024
  4. 2023

Answer(s): A



Event correlation is a procedure that is assigned with a new meaning for a set of events that occur in a predefined interval of time.
Which type of correlation will you use if your organization wants to use different OS and network hardware platforms throughout the network?

  1. Same-platform correlation
  2. Cross-platform correlation
  3. Multiple-platform correlation
  4. Network-platform correlation

Answer(s): B



Which root folder (hive) of registry editor contains a vast array of configuration information for the system, including hardware settings and software settings?

  1. HKEY_USERS
  2. HKEY_CURRENT_USER
  3. HKEY_LOCAL_MACHINE
  4. HKEY-CURRENT_CONFIG

Answer(s): C



Hard disk data addressing is a method of allotting addresses to each ___________of data on a hard disk

  1. Physical block
  2. Logical block
  3. Operating system block
  4. Hard disk block

Answer(s): A



Viewing page 4 of 37
Viewing questions 16 - 20 out of 180 questions



Post your Comments and Discuss GAQM CFA-001 exam prep with other Community members:

Join the CFA-001 Discussion