Digital Forensics 2

Question 1

Data that an operating system creates and overwrites without the computer user taking direct action to save this data.

Answer 1

Temporary data

Question 2

offline analysis conducted on an evidence disk or forensic duplicate after booting from a CD or another system

Answer 2

physical analysis

Question 3

analysis involving using the native OS, on the evidence disk or forensic duplicate to peruse the data.

Answer 3

logical analysis

Question 4

a kind of software that cleans unallocated space, also called a scrubber.

Answer 4

sweepers

Question 5

a method of using techniques other than brute force to derive a cryptographic key.

Answer 5

Cryptanalysis

Question 6

In steganography, the ________ is the stream or file into which the data is hidden.

Answer 6

Carrier

Question 7

a data structure in a file system that stores all info about file except its name and its actual data.

Answer 7

Inodes

Question 8

a command line OS

Answer 8

DOS (Disk Operating System)

Question 9

a portion of virtual address space of a program.

Answer 9

data segment

Question 10

record of HDD partition used to initiate booting that partition

Answer 10

MBR