Free WGU Digital-Forensics-in-Cybersecurity Exam Questions

Question 1

A cybercriminal hacked into an Apple iPad that belongs to a company's chief executive officer (CEO). The cybercriminal deleted some important files on the data volume that must be retrieved. Which hidden folder will contain the digital evidence?

A : /Private/etc

B : /lost+found

C : /.Trashes/501

D : /etc

Answer: C

Question 2

An employee sends an email message to a fellow employee. The message is sent through the company's messaging server. Which protocol is used to send the email message?

A : SNMP

B : IMAP

C : POP3

D : SMTP

Answer: D

Question 3

An organization believes that a company-owned mobile phone has been compromised. Which software should be used to collect an image of the phone as digital evidence?

A : PTFinder

B : Forensic SIM Cloner

C : Forensic Toolkit (FTK)

D : Data Doctor

Answer: C

Question 4

How should a forensic scientist obtain the network configuration from a Windows PC before seizing it from a crime scene?

A : By checking the system properties

B : By using the ipconfig command from a command prompt on the computer

C : By opening the Network and Sharing Center

D : By rebooting the computer into safe mode

Answer: B

Question 5

A cybercriminal hacked into an Apple iPad that belongs to a company's chief executive officer (CEO). The cybercriminal deleted some important files on the data volume that must be retrieved. Which hidden folder will contain the digital evidence?

A : /Private/etc

B : /lost+found

C : /.Trashes/501

D : /etc

Answer: C