Deciding how to destroy evidentiary materials that is no longer ...

[Metfan725]

In order to pass the scrutiny of a judge a tool must pass four separate tests that provide a measure of the scientific validity of the results. These tests are part of the ________ process.

◦ Dow
◦ Moore
◦ NIST
◦ Daubert

[shewald78]

Daubert

[Metfan725]

Thanks

[shewald78]

Welcome

[B]

Which of the following is an example of a write blocker that can be used to assure a forensically sound copy of a suspect drive?

◦ Weibetech Ultradock
◦ SANS DriveProtect
◦ Guidance UltraSAN
◦ Cellubrite

[dreamfighter72]

Weibetech Ultradock

[saliriagwu]

Which of the following utilities can detect a file that has been configured as an alternate data fork to another file?

◦ Strings
◦ PSFIle
◦ Autoruns
◦ Streams

[cloud]

Streams

[luminitza]

Microsoft provides a collection of free utilities for analyzing and troubleshooting problems specific to the Windows operating system. These utilities are part of the ________ suite.

◦ MSCONFIG
◦ Sysinternals
◦ Technet
◦ Winhex

[amandanbreshears]

Sysinternals