Question 1

Which of the following is not a valid source for cloud forensics training??

Accepted Answer

A)  ?(IS
C)  2Certified Cyber Forensics Professional
B)  ?INFOSEC Intitute
C)  Sans Cloud Forensics with F-Response
D)  A+ SecurityE) A) and C)
F) None of the above

Question 2

The law requires search warrants to contain specific descriptions of what's to be seized. For cloud environments, the property to be seized usually describes physical hardware rather than data, unless the CSP is a suspect.

Accepted Answer

A) True 
 B)False

Question 3

What capabilities should a forensic tool have to handle acquiring data from the cloud?

Accepted Answer

Tools must be able to identify, label, r...

Question 4

Where is the snapshot database created by Google Drive located in Windows?​

Accepted Answer

A)  ​C: \Program Files\Google\Drive
B)  ​C: \ Users\​username​\AppData\Local\Google\Drive
C)  C: \ Users\​username​\Google\Google Drive
D)  C: \Google\DriveE) B) and C)
F) All of the above

Question 5

Math each item with a statement below
-?Vendors that provide on-demand network access to a shared pool of resources (typically remote data storage or Web applications)

Accepted Answer

A)  cloud service providers (CSPs) 
B)  community cloud
C)  deprovisioning
D)  hybrid cloud
E)  infrastructure as a service (IaaS) F) multitenancyG) private cloudH) provisioningI) public cloudJ) spoliationK) B) and F)
L) G) and J)

Question 6

Describe how the Forensic Open-Stack Tools (FROST) bypasses a virtual machine's hypervisor.​

Accepted Answer

With FROST, collected data is placed in ...

Question 7

Explain what a service level agreement is.

Accepted Answer

Organizations that sell cloud services h...

Question 8

To reduce the time it takes to start applications, Microsoft has created __________ files, which contain the DLL pathnames and metadata used by applications.​

Accepted Answer

A)  cache​
B)  ​prefetch
C)  config
D)  tempE) All of the above
F) C) and D)

Question 9

What cloud application offers a variety of cloud services, including automation and CRM, cloud application development, and Web site marketing?​

Accepted Answer

A)  IBM Cloud​
B)  ​Amazon EC2
C)  Salesforce
D)  HP HelionE) B) and D)
F) C) and D)

Question 10

?With cloud systems running in a virtual environment, _______________ can give you valuable information before, during, and after an incident.

Accepted Answer

A)  ?RAM
B)  ?snapshot
C)  live acquisition
D)  carvingE) B) and D)
F) B) and C)

Question 11

Math each item with a statement below
-A cloud service dedicated to a single organization.?

Accepted Answer

A)  cloud service providers (CSPs) 
B)  community cloud
C)  deprovisioning
D)  hybrid cloud
E)  infrastructure as a service (IaaS) F) multitenancyG) private cloudH) provisioningI) public cloudJ) spoliationK) F) and G)
L) A) and B)

Question 12

The __________________ Dropbox file stores information on shared directories associated with a Dropbox user account and file transfers between Dropbox and the client's system.​

Accepted Answer

A)  ​filecache.dbx
B)  ​read_filejournal
C)  filetx.log
D)  filecache.dllE) B) and D)
F) None of the above

Question 13

Math each item with a statement below
-?With this cloud service level, an organization supplies its own OS, applications, databases, and operations staff, and the cloud provider is responsible only for selling or leasing the hardware.

Accepted Answer

A)  cloud service providers (CSPs) 
B)  community cloud
C)  deprovisioning
D)  hybrid cloud
E)  infrastructure as a service (IaaS) F) multitenancyG) private cloudH) provisioningI) public cloudJ) spoliationK) A) and D)
L) E) and H)

Question 14

In a prefetch file, the application's last access date and time are at offset _______________.​

Accepted Answer

A)  ​0x80
B)  ​0x88
C)  0x90
D)  0xD4E) All of the above
F) C) and D)

Question 15

Math each item with a statement below
-A principle of software architecture in which a single installation of a program runs on a server accessed by multiple entities (tenants) . when software is access by tenants in multiple jurisdictions, conflicts in copyright and licensing laws might result.?

Accepted Answer

A)  cloud service providers (CSPs) 
B)  community cloud
C)  deprovisioning
D)  hybrid cloud
E)  infrastructure as a service (IaaS) F) multitenancyG) private cloudH) provisioningI) public cloudJ) spoliationK) E) and H)
L) B) and J)

Question 16

Which of the following is NOT a service level for the cloud?​ ​

Accepted Answer

A)  ​Software as a service
B)  ​Virtualization as a service
C)  Platform as a service
D)  Infrastructure as a serviceE) All of the above
F) B) and C)

Question 17

Explain what "anti-forensics" is, and provide detail on some anti-forensics tactics.

Accepted Answer

Destroying ESI that's potential evidence...

Question 18

Math each item with a statement below
-Allocating cloud resources, such as additional disk space.?

Accepted Answer

A)  cloud service providers (CSPs) 
B)  community cloud
C)  deprovisioning
D)  hybrid cloud
E)  infrastructure as a service (IaaS) F) multitenancyG) private cloudH) provisioningI) public cloudJ) spoliationK) A) and B)
L) A) and E)

Question 19

Describe the role of incident first responders, and discuss some factors that should be addressed with first responders.

Accepted Answer

Typically, CSPs have personnel trained t...

Question 20

The ________________ script converts Dropbox's config.db into a readable text file.?

Accepted Answer

The answer of The ________________ script converts Dropbox's config.db into...

Exam 13: Cell Phone and Mobile Device Forensics

Math each item with a statement below -A principle of software architecture in which a single installation of a program runs on a server accessed by multiple entities (tenants) . when software is access by tenants in multiple jurisdictions, conflicts in copyright and licensing laws might result.?

Correct AnswerverifiedShow Answer

The law requires search warrants to contain specific descriptions of what's to be seized. For cloud environments, the property to be seized usually describes physical hardware rather than data, unless the CSP is a suspect.

Correct AnswerverifiedShow Answer

Explain what "anti-forensics" is, and provide detail on some anti-forensics tactics.

Correct AnswerverifiedDestroying ESI that's potential evidence...View AnswerShow Answer

To reduce the time it takes to start applications, Microsoft has created __________ files, which contain the DLL pathnames and metadata used by applications.​

Correct AnswerverifiedShow Answer

In a prefetch file, the application's last access date and time are at offset _______________.​

Correct AnswerverifiedShow Answer

Which of the following is NOT a service level for the cloud?​ ​

Correct AnswerverifiedShow Answer

Describe how the Forensic Open-Stack Tools (FROST) bypasses a virtual machine's hypervisor.​

Correct AnswerverifiedWith FROST, collected data is placed in ...View AnswerShow Answer

The ________________ script converts Dropbox's config.db into a readable text file.?

Correct AnswerverifiedShow Answer

What capabilities should a forensic tool have to handle acquiring data from the cloud?

Correct AnswerverifiedTools must be able to identify, label, r...View AnswerShow Answer

Math each item with a statement below -Allocating cloud resources, such as additional disk space.?

Correct AnswerverifiedShow Answer

Where is the snapshot database created by Google Drive located in Windows?​

Correct AnswerverifiedShow Answer

Which of the following is not a valid source for cloud forensics training??

Correct AnswerverifiedShow Answer

Math each item with a statement below -?With this cloud service level, an organization supplies its own OS, applications, databases, and operations staff, and the cloud provider is responsible only for selling or leasing the hardware.

Correct AnswerverifiedShow Answer

Math each item with a statement below -?Vendors that provide on-demand network access to a shared pool of resources (typically remote data storage or Web applications)

Correct AnswerverifiedShow Answer

The __________________ Dropbox file stores information on shared directories associated with a Dropbox user account and file transfers between Dropbox and the client's system.​

Correct AnswerverifiedShow Answer

What cloud application offers a variety of cloud services, including automation and CRM, cloud application development, and Web site marketing?​

Correct AnswerverifiedShow Answer

Explain what a service level agreement is.

Correct AnswerverifiedOrganizations that sell cloud services h...View AnswerShow Answer

Describe the role of incident first responders, and discuss some factors that should be addressed with first responders.

Correct AnswerverifiedTypically, CSPs have personnel trained t...View AnswerShow Answer

Math each item with a statement below -A cloud service dedicated to a single organization.?

Correct AnswerverifiedShow Answer

?With cloud systems running in a virtual environment, _______________ can give you valuable information before, during, and after an incident.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Destroying ESI that's potential evidence...
View Answer

To reduce the time it takes to start applications, Microsoft has created __________ files, which contain the DLL pathnames and metadata used by applications.

Correct Answer
verified

In a prefetch file, the application's last access date and time are at offset _______________.

Correct Answer
verified

Which of the following is NOT a service level for the cloud?

Correct Answer
verified

Describe how the Forensic Open-Stack Tools (FROST) bypasses a virtual machine's hypervisor.

Correct Answer
verified
With FROST, collected data is placed in ...
View Answer

Correct Answer
verified

Correct Answer
verified
Tools must be able to identify, label, r...
View Answer

Correct Answer
verified

Where is the snapshot database created by Google Drive located in Windows?

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

The __________________ Dropbox file stores information on shared directories associated with a Dropbox user account and file transfers between Dropbox and the client's system.

Correct Answer
verified

What cloud application offers a variety of cloud services, including automation and CRM, cloud application development, and Web site marketing?

Correct Answer
verified

Correct Answer
verified
Organizations that sell cloud services h...
View Answer

Correct Answer
verified
Typically, CSPs have personnel trained t...
View Answer

Correct Answer
verified

Correct Answer
verified