QUESTION: 125

Challenges to the authenticity of computer records often take on one of three forms. Please select the statement that best describes one of the three challenges.

Parties may question the accountability of computer-generated records by challenging the authenticity of the computer program that generated the records.
Parties may challenge the authenticity of computer-stored records by questioning the authority of their author.
Parties may challenge the authenticity of both computer-generated and computer- stored records by questioning whether the records were altered, manipulated, or damaged after they were created.
Parties may challenge the authenticity of both computer-generated and computer- stored records by questioning whether the records were altered, manipulated, or damaged before they were created.

Answer(s): C

Reveal Solution Next Question

QUESTION: 126

What should be in an electronic forensic tool kit?

Hard drive partitioning tools, File viewers, CD-R and ZIP disc utilities, Unerase and System Recovery utilities, Resource snapshot utilities, Text searching utilities, make up the complete list of tools needed.
Hard drive partitioning tools, File viewers, CD-R and ZIP disc utilities, erase and System Recovery utilities, Resource snapshot utilities, Text searching utilities, make up the complete list of tools needed.
Hard drive partitioning tools, File viewers, CD-R and ZIP disc utilities, erase and System Recovery utilities, Resource snapshot utilities, Text searching utilities, and tools specific to network and operating system type.
Hard drive partitioning tools, File viewers, CD-R and ZIP disc utilities, Unerase and System Recovery utilities, Resource snapshot utilities, Text searching utilities, and tools specific to network and operating system type.

Answer(s): D

Reveal Solution Next Question

QUESTION: 127

A forensically safe file viewer can cross not only application but OS boundaries, and they offer the added benefit that:

They don't tamper with the data in any way. Opening a Word file in a viewer usually changes nothing, for instance, but opening it in Word can change the modification date and other Properties-style information.
They don't tamper with the data in any way however they can change the modification date and other Properties-style information.
Opening a Word file in a viewer can change the modification date and other Properties-style information. When opening the same file in Word usually changes nothing.
They will tamper with the data in a subtle way.

Answer(s): A

Reveal Solution Next Question

QUESTION: 128

Password protection, and especially file encryption, can cause the following problem for Forensic processes:

Critical business data can be held 'hostage' through the use of file encryption.
Evidence in criminal cases can be secured by handlers through file encryption.
Passwords used to secure hardware can be forgotten or lost when an employee becomes unavailable.
Forensic text search utilities cannot identify strings of text in complex backup files.

Answer(s): A

Reveal Solution Next Question

Free II0-001 Exam Braindumps (page: 32)

QUESTION: 125

QUESTION: 126

QUESTION: 127

QUESTION: 128