Reference no: EM132675545
Part 1: Concepts from Unit Reading
1. According to ISO standard 27037, which of the following is an important factor in data acquisition? (Choose all that apply.)
A. The DEFR's competency
B. The DEFR's skills in using the command line
C. Use of validated tools
D. Conditions at the acquisition setting
2. Hashing, filtering, and file head analysis make up which function of digital forensics tools?
A. Validation and verification
B. Acquisition
C. Extraction
D. Reconstruction
3. Which forensic image format creates or incorporates a validation hash value in the image format? (Choose all that apply).
A. Expert witness
B. SMART
C. aff
D. dd
Part 2: Functions of Digital Forensics Tools
Beginning with acquisition and validation, describe all six functions of digital forensics tools.
Part 3: Validating Data
What does it mean to validate data? Describe how hexadecimal editors and hash values are used to validate data.