[Jan 08, 2025] Fully Updated Free Actual GAQM CFA-001 Exam Questions [Q71-Q92]

QUESTION 71
Raw data acquisition format creates ____________of a data set or suspect drive.

QUESTION 72
Router log files provide detailed Information about the network traffic on the Internet. It gives information about the attacks to and from the networks. The router stores log files in the____________.

QUESTION 73
An Internet standard protocol (built on top of TCP/IP) that assures accurate synchronization to the millisecond of computer clock times in a network of computers. Which of the following statement is true for NTP Stratum Levels?

QUESTION 74
Which of the following statements is incorrect when preserving digital evidence?

QUESTION 75
International Mobile Equipment Identifier (IMEI) is a 15-dlgit number that indicates the manufacturer, model type, and country of approval for GSM devices. The first eight digits of an IMEI number that provide information about the model and origin of the mobile device is also known as:

QUESTION 76
Which Is a Linux journaling file system?

QUESTION 77
Depending upon the Jurisdictional areas, different laws apply to different incidents. Which of the following law is related to fraud and related activity in connection with computers?

QUESTION 78
Which is not a part of environmental conditions of a forensics lab?

QUESTION 79
You can interact with the Registry through intermediate programs. Graphical user interface (GUI) Registry editors such as Regedit.exe or Regedt32 exe are commonly used as intermediate programs in Windows 7. Which of the following is a root folder of the registry editor?

QUESTION 80
JPEG is a commonly used method of compressing photographic Images. It uses a compression algorithm to minimize the size of the natural image, without affecting the quality of the image. The JPEG lossy algorithm divides the image in separate blocks of____________.

QUESTION 81
The Recycle Bin exists as a metaphor for throwing files away, but it also allows user to retrieve and restore files. Once the file is moved to the recycle bin, a record is added to the log file that exists in the Recycle Bin.
Which of the following files contains records that correspond to each deleted file in the Recycle Bin?

QUESTION 82
You have been given the task to investigate web attacks on a Windows-based server.
Which of the following commands will you use to look at which sessions the machine has opened with other systems?

QUESTION 83
Data is striped at a byte level across multiple drives and parity information is distributed among all member drives.

What RAID level is represented here?

QUESTION 84
Mobile phone forensics is the science of recovering digital evidence from a mobile phone under forensically sound conditions.

QUESTION 85
Attackers can manipulate variables that reference files with “dot-dot-slash (./)” sequences and their variations such as http://www.juggyDoy.corn/GET/process.php./././././././././etc/passwd.
Identify the attack referred.

QUESTION 86
Shortcuts are the files with the extension .Ink that are created and are accessed by the users. These files provide you with information about:

QUESTION 87
A steganographic file system is a method to store the files in a way that encrypts and hides the data without the knowledge of others

QUESTION 88
Graphics Interchange Format (GIF) is a ___________RGB bitmap Image format for Images with up to 256 distinct colors per frame.

QUESTION 89
All the Information about the user activity on the network, like details about login and logoff attempts, is collected in the security log of the computer. When a user’s login is successful, successful audits generate an entry whereas unsuccessful audits generate an entry for failed login attempts in the logon event ID table.
In the logon event ID table, which event ID entry (number) represents a successful logging on to a computer?

QUESTION 90
Which one of the following statements is not correct while preparing for testimony?

QUESTION 91
Smith, an employee of a reputed forensic Investigation firm, has been hired by a private organization to investigate a laptop that is suspected to be involved in hacking of organization DC server. Smith wants to find all the values typed into the Run box in the Start menu. Which of the following registry key Smith will check to find the above information?

QUESTION 92
What is the first step that needs to be carried out to crack the password?