D431 Digital Forensics in Cybersecurity - Set 1 - Part 2

Correct Answer: An attack that applies every possible key to decrypt a message

A brute-force attack systematically tries every possible key in the keyspace to decrypt a message or gain access to a system.

Correct Answer: Security log

The security log records successful and unsuccessful login attempts, making it important for forensic investigations.

Correct Answer: Real evidence

Real evidence refers to tangible, physical items that are relevant to a case, such as physical objects with fingerprints or other forensic significance.

Correct Answer: The handling of personal information by federal agencies

The Federal Privacy Act of 1974 regulates how federal agencies collect, store, and handle personal information about individuals.

Correct Answer: Caesar cipher

The Caesar cipher shifts the alphabet by a set number of positions to encrypt the text. It is one of the oldest known cryptographic techniques.

Correct Answer: It quantifies the risk of vulnerabilities in systems

The Common Vulnerability Scoring System (CVSS) is used to assess the severity of security vulnerabilities in systems and prioritize them for mitigation.

Correct Answer: Solid-state drive (SSD)

SSDs use NAND-based flash memory to store data, which makes them faster and more durable than traditional hard disk drives that use moving parts.

Correct Answer: An attack that renders a system unable to respond to legitimate requests

A DoS attack overwhelms a system with a flood of requests, causing it to become unavailable to legitimate users.

Correct Answer: It produces a fixed-length output from variable-length input

A hash function generates a fixed-length output, called a hash, from an input of any size, and it is designed to be irreversible.

Correct Answer: Wireless Communications and Public Safety Act

The Wireless Communications and Public Safety Act governs the collection and use of GPS location data and other nonverbal communications.

Correct Answer: The space between the end of a file and the end of the last data cluster

File slack refers to the unused space between the logical end of a file and the end of the physical data cluster on disk.

Correct Answer: A virus that can change its code to avoid detection

A polymorphic virus can modify its code or appearance to evade detection by antivirus software, making it harder to identify and remove.

Correct Answer: To guess passwords by trying all possible combinations

A brute-force attack systematically attempts all possible password combinations to gain access to a system.

Correct Answer: Worm

A worm is a type of malware that replicates itself and spreads to other systems without any action required from the user, unlike viruses, which often need a host.

Correct Answer: To crack encrypted messages without the key

Cryptanalysis is the practice of breaking cryptographic systems and decrypting messages without having access to the encryption key.

Correct Answer: It uses a different key for encryption and decryption

Asymmetric cryptography uses two different keysone for encryption and another for decryptionallowing secure communication without needing to share the private key.

Correct Answer: Child Protection and Sexual Predator Punishment Act

The Child Protection and Sexual Predator Punishment Act requires service providers to report the storage or transmission of child exploitation materials to law enforcement.

Correct Answer: Documentary evidence

Documentary evidence includes data stored in electronic form, such as emails or call logs, and must be authenticated before being presented in court.

Correct Answer: A data structure that stores information about a file, excluding its name and data

Inodes in a file system contain metadata about a file, such as its size, owner, and permissions, but not the actual data or file name.

Correct Answer: Health Insurance Portability and Accountability Act (HIPAA)

HIPAA governs the privacy and security of protected health information (PHI) in the United States.