Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. GAQM
  5. CFA-001

GAQM CFA-001 Exam
Certified Forensic Analyst (Page 6 )

Updated On: 1-Feb-2026
Page 6 of 37
PDF with 180 Questions

A swap file is a space on a hard disk used as the virtual memory extension of a computer's RAM.
Where is the hidden swap file in Windows located?

  1. C:\pagefile.sys
  2. C:\hiberfil.sys
  3. C:\config.sys
  4. C:\ALCSetup.log

Answer(s): A



Centralized logging is defined as gathering the computer system logs for a group of systems in a centralized location. It is used to efficiently monitor computer system logs with the frequency required to detect security violations and unusual activity.

  1. True
  2. False

Answer(s): A



Smith, as a part his forensic investigation assignment, has seized a mobile device. He was asked to recover the Subscriber Identity Module (SIM card) data the mobile device. Smith found that the SIM was protected by a Personal identification Number (PIN) code but he was also aware that people generally leave the PIN numbers to the defaults or use easily guessable numbers such as 1234. He unsuccessfully tried three PIN numbers that blocked the SIM card.
What Jason can do in this scenario to reset the PIN and access SIM data?

  1. He should contact the device manufacturer for a Temporary Unlock Code (TUK) to gain access to the SIM
  2. He cannot access the SIM data in this scenario as the network operators or device manufacturers have no idea about a device PIN
  3. He should again attempt PIN guesses after a time of 24 hours
  4. He should ask the network operator for Personal Unlock Number (PUK) to gain access to the SIM

Answer(s): D



At the time of evidence transfer, both sender and receiver need to give the information about date and time of transfer in the chain of custody record.

  1. True
  2. False

Answer(s): A



Digital photography helps in correcting the perspective of the Image which Is used In taking the measurements of the evidence. Snapshots of the evidence and incident-prone areas need to be taken to help in the forensic process. Is digital photography accepted as evidence in the court of law?

  1. Yes
  2. No

Answer(s): A



Viewing page 6 of 37
Viewing questions 26 - 30 out of 180 questions



Post your Comments and Discuss GAQM CFA-001 exam prep with other Community members:

Join the CFA-001 Discussion