Computer Forensics in Today's World CHFI Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the primary purpose of e-discovery in contrast to computer forensics?

   • ATo determine the root cause of a security breach.
   • BTo monitor network traffic for malicious activity.
   • CTo recover deleted files from a suspect's computer.
   • DTo identify and produce relevant electronic documents during civil litigation.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company is facing a lawsuit from a former employee who claims wrongful termination. The company's legal team wants to find evidence on the employee's work computer that might support the company's defense. The IT department has already reimaged the computer for a new employee. What is the most significant consequence of this action?

   • AThe new employee will not be able to use the computer.
   • BThe original data may be overwritten, making forensic recovery difficult or impossible.
   • CThe computer's hardware will be damaged.
   • DThe company will be fined for not preserving evidence.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which of the following is a common type of cybercrime?

   • AData backup
   • BSoftware licensing
   • CPhishing
   • DHardware maintenance
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which emerging technology is likely to have a significant impact on computer forensics?

   • AFax machines.
   • BFloppy disk drives.
   • CCRT monitors.
   • DArtificial intelligence and machine learning.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company is facing a lawsuit from a former employee alleging wrongful termination. The company's legal team wants to find emails that show the employee's poor performance. Which discipline is most appropriate for this task?

   • AData recovery, because it involves retrieving deleted emails.
   • BComputer forensics, because it involves analyzing digital evidence.
   • CIncident response, because it involves responding to a security incident.
   • DE-discovery, because it involves identifying and producing relevant electronic documents for litigation.
   Reveal Solution Discussion Select an answer first