- (Exam Topic 2)
Which of the following files stores information about local Dropbox installation and account, email IDs linked with the account, current version/build for the local application, the host_id, and local path information?

1. A. host.db
2. B. sigstore.db
3. C. config.db
4. D. filecache.db

Correct Answer: C

- (Exam Topic 1)
You are assigned to work in the computer forensics lab of a state police agency. While working on a high profile criminal case, you have followed every applicable procedure, however your boss is still concerned that the defense attorney might question whether evidence has been changed while at the lab. What can you do to prove that the evidence is the same as it was when it first entered the lab?

1. A. make an MD5 hash of the evidence and compare it with the original MD5 hash that was taken when the evidence first entered the lab
2. B. make an MD5 hash of the evidence and compare it to the standard database developed by NIST
3. C. there is no reason to worry about this possible claim because state labs are certified
4. D. sign a statement attesting that the evidence is the same as it was when it entered the lab

Correct Answer: A

- (Exam Topic 4)
An investigator wants to extract passwords from SAM and System Files. Which tool can the Investigator use to obtain a list of users, passwords, and their hashes In this case?

1. A. PWdump7
2. B. HashKey
3. C. Nuix
4. D. FileMerlin

Correct Answer: A

- (Exam Topic 3)
Lynne receives the following email:
Dear lynne@gmail.com! We are sorry to inform you that your ID has been temporarily frozen due to incorrect or missing information saved at 2016/11/10 20:40:24
You have 24 hours to fix this problem or risk to be closed permanently! To proceed Please Connect >> My Apple ID
Thank You The link to My Apple ID shows http://byggarbetsplatsen.se/backup/signon/ What type of attack is this?

1. A. Mail Bombing
2. B. Phishing
3. C. Email Spamming
4. D. Email Spoofing

Correct Answer: B

- (Exam Topic 3)
Hard disk data addressing is a method of allotting addresses to each of data on a hard disk.

1. A. Physical block
2. B. Operating system block
3. C. Hard disk block
4. D. Logical block

Correct Answer: A