EC-COUNCIL

EC-Council Digital Forensics Essentials

DFE

The EC-Council Digital Forensics Essentials (D|FE) certification is an entry-level, foundational program that introduces the core phases, principles, and practices of digital forensics investigation. Designed for beginners with no prior IT or cybersecurity experience, it builds practical skills through 12 modules, 34 hands-on labs, and real-world CTF capstone challenges. Earning D|FE validates your ability to conduct structured forensic investigations and provides a globally recognized credential that serves as a stepping stone to advanced programs like the Computer Hacking Forensic Investigator (C|HFI).

Practice Free Questions

7Domains

35Objectives

310Practice pages

1489Free questions

DFE free practice questions

Choose any objective and open any question page — no sign-in required.

Introduction to computer forensics

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

Digital evidence and forensic readiness

47 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–47

Roles and responsibilities of a forensic investigator

45 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45

Legal compliance in computer forensics

47 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–47

Forensic investigation process (pre-, investigation, and post-investigation phases)

44 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–44

Disk drive types and logical structure of a disk

34 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–34

Boot processes and file systems across Windows, Linux, and macOS

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

File system analysis and data recovery

41 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–41

Types and methods of data acquisition

41 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–41

Forensic image formats and standards

22 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–22

Data deletion and file recovery concepts

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

Password protection and encryption techniques

49 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–49

Steganography and data hiding techniques

50 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50

Artifact wiping and trail obfuscation

34 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–34

Anti-forensics countermeasures

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

Windows volatile and non-volatile data collection

39 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–39

Windows memory and artifact analysis

50 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50

Web browser forensics

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

Linux memory and file system analysis

50 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50

Mac forensics

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

Network forensics fundamentals

51 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–51

Event correlation concepts and techniques

41 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–41

Identifying IoCs from network logs

48 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–48

Web application forensics

45 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45

IIS and Apache web server log analysis

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

Dark web concepts and investigation

47 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–47

Tor browser forensics

47 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–47

Email crime investigation

44 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–44

Email header analysis and authentication

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

Business Email Compromise (BEC) investigations

54 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–54

Malware types, components, and distribution

39 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–39

Malware forensics fundamentals

45 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45

Static malware analysis

51 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–51

Dynamic malware analysis

45 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45

System and network behavior analysis

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (35 objectives · 310 pages).

EC-Council Digital Forensics Essentials

DFE free practice questions

Domain 1 · Computer Forensics Foundations and Process15% of practice bank · 5 objectives · 218 questions15%

Domain 2 · Storage Media and Data Acquisition12% of practice bank · 5 objectives · 176 questions12%

Domain 3 · Defeating Anti-Forensics Techniques13% of practice bank · 5 objectives · 195 questions13%

Domain 4 · Operating System Forensics15% of practice bank · 5 objectives · 223 questions15%

Domain 5 · Network and Web Attack Forensics15% of practice bank · 5 objectives · 227 questions15%

Domain 6 · Dark Web and Email Forensics16% of practice bank · 5 objectives · 232 questions16%

Domain 7 · Malware Forensics15% of practice bank · 5 objectives · 218 questions15%