Domain 7 Set 1

Question 1

What are the 7 Forensics investigation process?

Answer 1

1. identification
2. Preservation
3. Collection
4. Examination
5. Analysis
6. Presentation
7. Decision

Question 2

Locard’s Principle of Exchange

Answer 2

Based on the premise that a criminal will usually leave something behind even if it’s just a tip-off about their motives based on what they stole.

Question 3

evidence based on the 5 senses

Answer 3

direct evidence

Question 4

This type of evidence, which includes real and best evidence,

Answer 4

direct evidence

Question 5

This type of evidence,does not require supporting evidence to back it up

Answer 5

direct evidence

Question 6

Physical evidence is know as

Answer 6

Real evidence

Question 7

A signed Contract is what type of evidence?

Answer 7

best evidence

Question 8

These on their own aren’t sufficient to prove a case, but are used instead as supporting evidence.

Answer 8

secondary evidence

Question 9

copies of a document is

Answer 9

Hearsay

Question 10

testimony from expert witnesses is what type of evidence?

Answer 10

secondary evidence

Question 11

MTTF

Answer 11

Mean Time To Failure

Question 12

MTTR

Answer 12

Mean Time To Repair

Question 13

Disk Striping, what raid

Answer 13

Raid-0 (speed) no fault tolerance

Question 14

Disk Striping with Parity, what raid

Answer 14

Raid -5

Question 15

Clustering is primarily for

Answer 15

fault tolerance

Question 16

load balancing is primarily for

Answer 16

performance optimization

Question 17

everything is backed up on a regular schedule regardless if anything has changed.

Answer 17

Full backup

Question 18

everything that has changed since the last full backup is backed up.

Answer 18

Incremental backup

Question 19

all files that have been modified since the last full backup are backed up.

Answer 19

Differential backup

Question 20

The archive bit is not reset. with what backup

Answer 20

Differential backup

Question 21

number of tapes needed to restore with Differential backups?

Answer 21

only reset two tapes

Question 22

what backup is the quickest to restore

Answer 22

Full backup

Question 23

what backup is the slowest to restore

Answer 23

Incremental backups

Question 24

batch process of moving data is what?

Answer 24

Electronic Vaulting

Question 25

Moves the Journal or transaction logs to a remote location

Answer 25

Remote Journaling