Udemy Test 4

Question 1

Johnny wants to use the tool that offers thumbnail previews. He should choose:

Answer 1

DiskDigger

Question 2

This tool can be used to recover lost data from RAID and hard drives:

Answer 2

Total Recall

Question 3

This tool offers a secure overwrite feature that meets military standards.

Answer 3

Recuva

Question 4

The insider threat caused a lot of chaos. Sally, the digital forensic investigator, needs a tool that can repair and recover disk bad sectors. Which tool should she use?

Answer 4

Quick Recovery

Question 5

Roberta suspects the company’s network has been compromised. How can she look for unusual network services running?

Answer 5

net start

Question 6

This tool can recover files from a scratched CD (choose the best answer):

Answer 6

File Savage

Question 7

Sally is an investigator working for Diamond Corp. She needs to restore lost emails and their attachments. Which tool should she use (choose the best answer)?

Answer 7

Data Recovery Pro

Question 8

This tool can scan and recover encrypted and password-protected files.

Answer 8

Quick Recovery

Question 9

Jose is an investigator with CyberNet, Inc and is investigating an incident. How does he check to see if sessions have been opened with other systems?

Answer 9

net use

Question 10

Jason needs to review file shares on the server. He knows that he can use this command to review file shares and ensure their purpose.

Answer 10

net view

Question 11

The nbtstat command can be used for (choose the best answer):

Answer 11

NetBIOS

Question 12

This tool supports RAW recovery on lost volumes.

Answer 12

Stellar Phoenix

Question 13

Sara is investigating an incident and needs to display information about all logged in sessions on a local Windows computer. Which command should she use?

Answer 13

net session

Question 14

Tanisha wants to recover files with their original file name. She should use which of the following tools to accomplish this (choose the best answer)?

Answer 14

Stellar Phoenix

Question 15

A network administrator, with over 10 years of experience in Cisco systems, is trying to see if any TCP or UDP ports have unusual listening. What command is she using?

Answer 15

netstat -na

Question 16

This tool offers an “Advanced Deep Scan” mode, that scours a drive to find any traces of files that have been deleted.

Answer 16

Recuva

Question 17

This tool recovers data and also protects it.

Answer 17

OnTrack Easy Recovery

Question 18

David needs a tool that contains an ISO image. He knows that ______ offers this.

Answer 18

Active@ File Recovery

Question 19

Sally needs a tool that can support large hard disks. What should she use?

Answer 19

EaseUS

Question 20

This tool offers the ability to “preview data on the fly” and allows you to recover data even if Windows has been reinstalled.

Answer 20

Recover My Files

Question 21

You can check for the creation of new accounts in the administrator group with the ____ command.

Answer 21

lusrmgr.msc

Question 22

How can you find scheduled and unscheduled tasks on the local host?

Answer 22

schtasks.exe

Question 23

Roberta is an investigator with DHS. She is at the scene and needs to locate and recover files deleted from an NTFS-formatted volume. What should she use?

Answer 23

Pandora Recovery

Question 24

When a file is deleted in FAT, the first letter of the deleted filename is changed to:

Answer 24

E5H

Question 25

William needs a tool that can allow him to specify a specific file type for precise search results. What tool is this?

Answer 25

EaseUS