Cnit 420 Exam 1 Questions With 100% Correct Answers 2024

Alternate data streams {Ans: Additional file attributes appending data}Fourth Amendment {Ans: Protects against unreasonable search and seizure}Line of authority {Ans: Determines who can initiate an investigation}Expert witness compression format {Ans: Unofficial standard for proprietary formats}Fdisk {Ans: Linux command for partition management}Secure hash algorithm v1 (SHA-1) {Ans: NIST-developed hash algorithm}Probable cause {Ans: Standard for police officer's right to arrest or search}Plain view doctrine {Ans: Allows seizure of visible objects without a warrant}Innocent information {Ans: Unrelated data often found with recoverable evidence}Private sector investigations {Ans: Corporate investigations driven by internal policies}Whole disk encryption {Ans: Makes static acquisitions more challenging}Automated Fingerprint Identification System (AFIS) {Ans: Computerized fingerprint identification connected to a database}Warning banner {Ans: Displays organization's right to inspect systems}Affidavit {Ans: Sworn statement supporting crime evidence}Dcfldd {Ans: Linux command for disk space clearing, preferred acquisition tool}Professional curiosity {Ans: Involves officials not part of crime scene team}RAID 6 {Ans: Has redundant parity on each disk}Metadata {Ans: Records in Master File Table (MFT)}Exculpatory evidence {Ans: Evidence that proves lack of action}Deleted files lingering {Ans: Files remain until overwritten on disk}