CIS 359 STUDY Extraordinary Success /cis359study.com CIS 359 STUDY Extraordinary Success /cis359study.c

www.cis359study.com CIS 359 Final Exam Set 2 • Question 1 A continuously changing process presents challenges in acquisition, as there is not a fixed state that can be collected, hashed, and so forth. This has given rise to the concept of ____ forensics which captures a point-in-time picture of a process. • Question 2 ____ is used both for intrusion analysis and as part of evidence collection and analysis. • Question 3 In evidence handling, specifically designed ____ are helpful because they are very difficult to remove without breaking. • Question 4 A search is constitutional if it does not violate a person’s reasonable or legitimate____. • Question 5 The forensic tool ____ does extensive pre-processing of evidence items that recovers deleted files and extracts e-mail messages. • Question 6 Most digital forensic teams have a prepacked field kit, also known as a(n) ____. • Question 7

CIS 359 STUDY Extraordinary Success /cis359study.com CIS 359 STUDY Extraordinary Success /cis359study.c | Page 9