Deck 5: Data, PDA, and Cell Phone Forensics

Question 1

________ is the most widely used hard drive technology.

Answer 1

EIDE

Question 2

Most recent ZIP drives can handle up to what amount of data?

A)500GB
B)1GB
C)750MB
D)120MB

Answer 2

C

Question 3

Hard drive disks can be made of

A)Ceramic
B)Glass
C)Aluminum
D)All can be used

Answer 3

D

Question 4

Which of the following is NOT considered a cellular phone capability?

A)Phone books
B)Call logs
C)Short message service
D)Video conferencing.

Question 5

USB flash drives typically use a(n)________ file system.

Question 6

Which of the following is considered to be the oldest computer backup medium?

A)Core memory
B)Large hard drives
C)Floppy disks
D)Tape

Question 7

The biggest plus when using Guidance software is its

A)Command-line interface
B)Gold standard interface
C)Graphical user interface
D)Linux capability

Question 8

RAM data in PDAs can be kept intact through which of the following means?

A)Nonerasable ROM
B)Self-refresh circuitry
C)Batteries
D)Capacitors

Question 9

________ media use light from laser or LED sources to determine 0s and 1s.

Question 10

If a PDA is off at the time it is seized,it should be

A)Switched on
B)Attached to the forensic examiner platform
C)Left off
D)Plugged into the nearest power strip

Question 11

Each hard drive platter may have how many heads for read/write capabilities?

A)1
B)6
C)4
D)2

Question 12

USB drives appear to most operating systems as a(n)

A)Regular drive
B)Encrypted drive
C)Virtual private drive
D)Folder containing files

Question 13

A primary function of a SIM card is to

A)Control a cell phone's memory
B)Track the power usage of the phone
C)Identify the subscriber to the phone network
D)Display user information during a call

Question 14

One of the most important tasks you must do when working with a hard drive is to

A)Perform a live analysis whenever possible
B)Prevent the hard drive from booting when you restart it to make the data transfer
C)Make sure you are working with the original data
D)Secure a password cracker in case you encounter protected files

Question 15

The paramount consideration when dealing with a PDA device is to

A)Find out who it belongs to
B)Access its files in a trusted environment
C)Avoid touching the unit as much as possible
D)Make sure power to the device is not interrupted

Question 16

Cellular phones can typically carry what size processor?

A)200MHz
B)1GHz
C)300MHz
D)900MHz

Question 17

To understand how hardware works,you must understand the ________ of how drives store 0s and 1s.

Question 18

A(n)________ groups the same tracks vertically through a stack of platters.

Question 19

In addition to a SIM,most cell phones have a(n)

A)AIM
B)PIM
C)PUK
D)SMS

Question 20

Most PDA memory is constructed of which type of memory?

A)Permanent RAM
B)Permanent ROM
C)Flash-type RAM
D)Flash-type ROM

Question 21

To gain access to a protected SIM,you may need to ask the service provider for a(n)________.

Question 22

User data is kept in the ________ section of a PDA.

Question 23

The simple rule for powering down equipment is that you pull the plug on everything but ________.

Question 24

A SIM is usually protected by a(n)________ or ________ number.

Question 25

New cellular phones are basically low-end _______.

Question 26

One excellent feature of ________ is that this software can crack Palm passwords.

Question 27

If a PDA has only a single rechargeable battery,the appropriate ________ should be connected to the device if possible.

Question 28

All PDAs come equipped with ________ software that provides the basic functionality.

Question 29

As further insurance against writing to a hard drive under investigation,an examiner should use a(n)________.

Question 30

Paraben's ________ software is one of the few tools that can be used for both cell phone and PDA forensics.