WGU Digital Forensics in Cybersecurity Exam Free Dumps

dumps2025-12-01T10:57:54+08:00

Passing WGU Digital Forensics in Cybersecurity exam is not difficult now. There are 50 questions in real WGU Digital Forensics in Cybersecurity exam, and you have 150 minutes to answer all the questions. The passing score is 70%. We provide the latest WGU Digital Forensics in Cybersecurity exam dumps, which are your best preparation material for you to study the test. Free WGU Digital Forensics in Cybersecurity exam dumps are available below.

Page 1 of 3

1. An organization believes that a company-owned mobile phone has been compromised.

Which software should be used to collect an image of the phone as digital evidence?

PTFinder

Forensic SIM Cloner

Forensic Toolkit (FTK)

Data Doctor

2. A digital forensic examiner receives a computer used in a hacking case. The examiner is asked to extract information from the computer's Registry.

How should the examiner proceed when obtaining the requested digital evidence?

Ensure that any tools and techniques used are widely accepted

Investigate whether the computer was properly seized

Enlist a colleague to witness the investigative process

Download a tool from a hacking website to extract the data

3. A victim of Internet fraud fell for an online offer after using a search engine to find a deal on an expensive software purchase. Once the victim learned about the fraud, he contacted a forensic investigator for help.

Which digital evidence should the investigator collect?

Virus signatures

Whois records

Computer logs

Email headers

4. A cybercriminal hacked into an Apple iPad that belongs to a company's chief executive officer (CEO).

The cybercriminal deleted some important files on the data volume that must be retrieved.

Which hidden folder will contain the digital evidence?

/Private/etc

/lost+found

/.Trashes/501

/etc

5. Susan was looking at her credit report and noticed that several new credit cards had been opened lately in her name. Susan has not opened any of the credit card accounts herself.

Which type of cybercrime has been perpetrated against Susan?

Identity theft

SQL injection

Cyberstalking

Malware

6. A company has identified that a hacker has modified files on one of the company's computers. The IT department has collected the storage media from the hacked computer.

Which evidence should be obtained from the storage media to identify which files were modified?

File timestamps

Private IP addresses

Public IP addresses

Operating system version

7. An organization has identified a system breach and has collected volatile data from the system.

Which evidence type should be collected next?

Running processes

Network connections

Temporary data

File timestamps

8. Where is the default location for 32-bit programs installed by a user on a 64-bit version of Windows 7?

C:ProgramData

C:Program files

C:Windows

C:Program files (x86)

9. Which principle of evidence collection states that access to evidence must be tracked from the time it is seized through its use in court?

Evidence record

Chain of custody

Event log

Audit log

10. A forensics investigator is investigating a Windows computer which may be collecting data from other computers on the network.

Which Windows command line tool can be used to determine connections between machines?

Telnet

Xdetect

Openfiles

Netstat

Page 2 of 3

11. A forensic specialist is about to collect digital evidence from a suspect's computer hard drive. The computer is off.

What should be the specialist's first step?

Carefully review the chain of custody form.

Turn the computer on and remove any malware.

Make a forensic copy of the computer's hard drive.

Turn the computer on and photograph the desktop.

12. A forensic scientist is examining a computer for possible evidence of a cybercrime.

Why should the forensic scientist copy files at the bit level instead of the OS level when copying files from the computer to a forensic computer?

Copying files at the OS level fails to copy deleted files or slack space.

Copying files at the OS level takes too long to be practical.

Copying files at the OS level changes the timestamp of the files.

Copying files at the OS level will copy extra information that is unnecessary.

13. Which storage format is a magnetic drive?

CD-ROM

SATA

Blu-ray

SSD

14. Which description applies to the Advanced Forensic Format (AFF)?

An open file standard developed by AccessData

A proprietary format used by the iLook tool

An open file standard used by Sleuth Kit and Autopsy

A proprietary format developed by Guidance Software

15. Which term describes the used space between the end of a file and the end of the last cluster assigned to the file?

Unallocated space

Volume slack

Host protected area

File slack

16. How is the Windows swap file, also known as page file, used?

Replaces bad sectors

Primarily for security

Augments the RAM

Reserved for system files

17. A forensic investigator wants to collect evidence from a file created by a Macintosh computer running OS X 10.8.

Which file type can be created by this OS?

ReiserFS

MFS

HFS+

NTFS

18. Which operating system creates a swap file to temporarily store information from memory on the hard drive when needed?

Linux

Mac

Unix

Windows

19. Which type of information does a Windows SAM file contain?

Hash of network passwords

Encrypted network passwords

Hash of local Windows passwords

Encrypted local Windows passwords

20. A USB flash drive was seized as evidence to be entered into a trial.

Which type of evidence is this USB flash drive?

Documentary

Demonstrative

Testimonial

Real

Page 3 of 3

21. Where does Windows store passwords for local user accounts?

HKLMSOFTWAREMicrosoftWindows NTCurrentVersionNetworkListProfiles

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWZCSVCParametersInterfaces

SAM file in WindowsSystem32

Security file in WindowsSystem32

22. Which file stores local Windows passwords in the WindowsSystem32 directory and is subject to being cracked by using a live CD?

SAM

IPSec

HAL

Ntidr

23. A forensic investigator needs to know which file type to look for in order to find emails from a specific client.

Which file extension is used by Eudora?

.dbx

.ost

.pst

.mbx

WGU Digital Forensics in Cybersecurity Exam Free Dumps

WGU Digital Forensics in Cybersecurity Exam Free Dumps

Share this post

Leave a Reply Cancel reply

Related Posts

Cybersecurity Architecture and Engineering Exam Dumps

WGU Information Technology Management Exam Free Dumps

WGU Managing Cloud Security Exam Free Dumps