- (Exam Topic 2)
Preparing an image drive to copy files to is the first step in Linux forensics. For this purpose, what would the following command accomplish?
dcfldd if=/dev/zero of=/dev/hda bs=4096 conv=noerror, sync

1. A. Fill the disk with zeros
2. B. Low-level format
3. C. Fill the disk with 4096 zeros
4. D. Copy files from the master disk to the slave disk on the secondary IDE controller

Correct Answer: A

- (Exam Topic 4)
During an Investigation, the first responders stored mobile devices In specific containers to provide network Isolation. All the following are examples of such pieces of equipment, except for:

1. A. Wireless StrongHold bag
2. B. VirtualBox
3. C. Faraday bag
4. D. RF shield box

Correct Answer: D

- (Exam Topic 2)
When investigating a computer forensics case where Microsoft Exchange and Blackberry Enterprise server are used, where would investigator need to search to find email sent from a Blackberry device?

1. A. RIM Messaging center
2. B. Blackberry Enterprise server
3. C. Microsoft Exchange server
4. D. Blackberry desktop redirector

Correct Answer: C