Support Digital Forensics CCSP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of hashing digital evidence during collection?

   • ATo verify the integrity of the evidence by detecting any changes
   • BTo index the evidence for faster search queries
   • CTo encrypt the evidence so only authorized investigators can view it
   • DTo compress the evidence to save storage space
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In cloud forensics, which of the following is considered volatile evidence that should be collected first?

   • ANetwork configuration logs
   • BCloud provider access logs
   • CVirtual machine disk files
   • DMemory (RAM) contents
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   During a cloud forensic investigation, which action is the FIRST step in the acquisition of digital evidence from a virtual machine?

   • ACreate a forensic copy of the virtual disk while the VM is running
   • BSnapshot the VM and then isolate it from the network
   • CIsolate the VM from the network and then create a forensic copy of its virtual disk
   • DDelete the VM and restore it from backup to capture a clean state
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is the most critical requirement for the secure storage of digital forensic evidence in a cloud environment?

   • AStoring evidence in a publicly accessible bucket for easy sharing with legal counsel
   • BEnsuring the evidence is stored in a way that preserves its integrity and prevents unauthorized modification
   • CStoring evidence in a format that is readable only by the original cloud provider's proprietary tools
   • DStoring evidence only in the same availability zone as the primary production data
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a critical requirement when acquiring digital evidence from a cloud service provider?

   • ACopying evidence to the investigator's personal cloud storage
   • BObtaining a warrant from the cloud provider's legal department
   • CUsing the provider's own backup tapes for evidence
   • DEnsuring the evidence is collected in a forensically sound manner
   Reveal Solution Discussion Select an answer first