Questions

Answer the following questions to test your knowledge of this chapter:

1. What are some of the features that are available with commercial and open source forensic platforms?
   1. Hex viewer
   2. Email carving
   3. Metadata viewer
   4. All of the above
2. In what registry hive could an incident responder find USBs that have been connected to the system?
   1. SAM
   2. Security
   3. System
   4. User profile
3. Web history may provide data on a phishing URL that’s been accessed by the system.
   1. True
   2. False
4. Which of the following is not a Windows registry hive?
   1. System
   2. SAM
   3. Storage
   4. Software