- (Exam Topic 1)
To preserve digital evidence, an investigator should .

1. A. Make two copies of each evidence item using a single imaging tool
2. B. Make a single copy of each evidence item using an approved imaging tool
3. C. Make two copies of each evidence item using different imaging tools
4. D. Only store the original evidence item

Correct Answer: C

- (Exam Topic 1)
An employee is attempting to wipe out data stored on a couple of compact discs (CDs) and digital video discs (DVDs) by using a large magnet. You inform him that this method will not be effective in wiping out the data because CDs and DVDs are media used to store large amounts of data and are not affected by the magnet.

1. A. logical
2. B. anti-magnetic
3. C. magnetic
4. D. optical

Correct Answer: D

- (Exam Topic 2)
Which of the following is an iOS Jailbreaking tool?

1. A. Kingo Android ROOT
2. B. Towelroot
3. C. One Click Root
4. D. Redsn0w

Correct Answer: D

- (Exam Topic 1)
You are working as a Computer forensics investigator for a corporation on a computer abuse case. You discover evidence that shows the subject of your investigation is also embezzling money from the company. The company CEO and the corporate legal counsel advise you to contact law enforcement and provide them with the evidence that you have found. The law enforcement officer that responds requests that you put a network sniffer on your network and monitor all traffic to the subject’s computer. You inform the officer that you will not be able to comply with that request because doing so would:

1. A. Violate your contract
2. B. Cause network congestion
3. C. Make you an agent of law enforcement
4. D. Write information to the subject’s hard drive

Correct Answer: C

- (Exam Topic 3)
Which of the following Windows-based tool displays who is logged onto a computer, either locally or remotely?

1. A. Tokenmon
2. B. PSLoggedon
3. C. TCPView
4. D. Process Monitor

Correct Answer: B