Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. GAQM
  5. CFA-001

GAQM CFA-001 Exam
Certified Forensic Analyst (Page 5 )

Updated On: 1-Feb-2026
Page 5 of 37
PDF with 180 Questions

How do you define forensic computing?

  1. It is the science of capturing, processing, and investigating data security incidents and making it acceptable to a court of law.
  2. It is a methodology of guidelines that deals with the process of cyber investigation
  3. It Is a preliminary and mandatory course necessary to pursue and understand fundamental principles of ethical hacking
  4. It is the administrative and legal proceeding in the process of forensic investigation

Answer(s): A



What is the smallest allocation unit of a hard disk?

  1. Cluster
  2. Spinning tracks
  3. Disk platters
  4. Slack space

Answer(s): A



Which one of the following statements is not correct while preparing for testimony?

  1. Go through the documentation thoroughly
  2. Do not determine the basic facts of the case before beginning and examining the evidence
  3. Establish early communication with the attorney
  4. Substantiate the findings with documentation and by collaborating with other computer forensics professionals

Answer(s): B



Which of the following statements is not a part of securing and evaluating electronic crime scene checklist?

  1. Locate and help the victim
  2. Transmit additional flash messages to other responding units
  3. Request additional help at the scene if needed
  4. Blog about the incident on the internet

Answer(s): D



Which of the following statement is not correct when dealing with a powered-on computer at the crime scene?

  1. If a computer is switched on and the screen is viewable, record the programs running on screen and photograph the screen
  2. If a computer is on and the monitor shows some picture or screen saver, move the mouse slowly without depressing any mouse button and take a photograph of the screen and record the information displayed
  3. If a monitor is powered on and the display is blank, move the mouse slowly without depressing any mouse button and take a photograph
  4. If the computer is switched off. power on the computer to take screenshot of the desktop

Answer(s): D



Viewing page 5 of 37
Viewing questions 21 - 25 out of 180 questions



Post your Comments and Discuss GAQM CFA-001 exam prep with other Community members:

Join the CFA-001 Discussion