Information Assurance Test Questions
Course Introduction
Information Assurance is a multidisciplinary field that focuses on the protection of information systems by ensuring their confidentiality, integrity, availability, authentication, and non-repudiation. This course introduces students to the principles and practices used to safeguard digital information and manage risks associated with computing environments. Topics include policy development, risk assessment and management, security frameworks, legal and ethical issues, disaster recovery, business continuity planning, and incident response. By exploring real-world cases and established methodologies, students gain a comprehensive foundation in designing, implementing, and maintaining secure information systems to support organizational objectives.
Recommended Textbook
Computer Forensics Principles and Practices 1st Edition by Linda Volonino
Available Study Resources on Quizplus 13 Chapters
600 Verified Questions
600 Flashcards
Source URL: https://quizplus.com/study-set/2159
Page 2
Chapter 1: Forensic Evidence and Crime Investigation
Available Study Resources on Quizplus for this Chatper
33 Verified Questions
33 Flashcards
Source URL: https://quizplus.com/quiz/43035
Sample Questions
Q1) Which of the following does NOT leave e-evidence?
A)Instant message
B)Word processing document file
C)Hard copy
D)Digital camera
Answer: C
Q2) Based on preliminary evidence obtained at the start of an investigation,an investigator may form a(n)________ about what happened.
Answer: theory
Q3) ________ evidence is that type that could incorrectly lead an investigator to believe the evidence is related to the crime.
Answer: Artifact
Q4) Which of the following is NOT deemed a critical infrastructure by the Department of Homeland Security?
A)Forestry services
B)Energy systems
C)Power companies
D)Transportation departments
Answer: A
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Computer Forensics Anddigital Detective Work
Available Study Resources on Quizplus for this Chatper
28 Verified Questions
28 Flashcards
Source URL: https://quizplus.com/quiz/43036
Sample Questions
Q1) Which of the following traditional crimes are easier because of widespread computer access?
A)Breaking and entering
B)Money laundering
C)Armed robbery
D)Assault
Answer: B
Q2) Evidence collected in violation of which amendment will cause the evidence to be excluded?
A)The Fourth Amendment
B)The First Amendment
C)The Ninth Amendment
D)The Tenth Amendment
Answer: A
Q3) If evidence items are released to auditors or authorities,the ________ should be recorded.
Answer: release dates
Q4) ________ is created when a file is created if it does not take up an entire sector. Answer: File slack
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Tools, Environments, Equipment, and Certifications
Available Study Resources on Quizplus for this Chatper
48 Verified Questions
48 Flashcards
Source URL: https://quizplus.com/quiz/43037
Sample Questions
Q1) Which of the following is the preferred way to make a forensic copy?
A)Create a mirror image.
B)Produce a sector-by-sector copy.
C)Copy residual data only.
D)Make a back-up tape image.
Answer: B
Q2) The current best approach to powering down a suspect PC is to
A)Simply power it down using the operating system
B)Keep it running on an UPS
C)Don't power it down
D)Pull the power plug
Answer: D
Q3) Which of the following tools is designed for use with Linux systems?
A)BlackBag
B)WinHex
C)Autopsy
D)PDA Seizure
Answer: C
Q4) The first step in analyzing data is to _________ it.
Answer: collect
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Policies and Procedures
Available Study Resources on Quizplus for this Chatper
63 Verified Questions
63 Flashcards
Source URL: https://quizplus.com/quiz/43038
Sample Questions
Q1) Which of the following is NOT an item generally included in a forensic kit?
A)Flashlight
B)USB external drive
C)General case intake form
D)Latex gloves
Q2) Supplementary materials
A)Uses an algorithm to make readable
B)Needs a word or phrase to unlock the file
C)Data hides in another file
D)Usually mail files
Q3) Body
A)Uses an algorithm to make readable
B)Needs a word or phrase to unlock the file
C)Data hides in another file
D)Usually mail files
Q4) The system BIOS can tell you
A)Hard drive geometry settings
B)What Web sites the user has visited recently
C)The computer's operating system
D)What applications are installed on the computer
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Data, PDA, and Cell Phone Forensics
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/43039
Sample Questions
Q1) RAM data in PDAs can be kept intact through which of the following means?
A)Nonerasable ROM
B)Self-refresh circuitry
C)Batteries
D)Capacitors
Q2) ________ media use light from laser or LED sources to determine 0s and 1s.
Q3) All PDAs come equipped with ________ software that provides the basic functionality.
Q4) POSE
A)Can do Blackberry devices
B)Completely emulates Palm
C)Cannot generate a hash of the Palm OS
D)Doesn't support Linux
Q5) PDA Seizure
A)CDMA phones
B)GSM phones
C)Supports GSM and TDMA
D)Palm OS
Q6) To understand how hardware works,you must understand the ________ of how drives store 0s and 1s.
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Operating Systems and Data Transmission
Basics for Digital Investigations
Available Study Resources on Quizplus for this Chatper
52 Verified Questions
52 Flashcards
Source URL: https://quizplus.com/quiz/43040
Sample Questions
Q1) System
A)Attempts to conceal files
B)Is used only by the system
C)Indicates a modified file
D)File may not be modified
Q2) For an examiner to understand how data may be captured,one must know that data traverses a network in ________.
Q3) Physical
A)Translates logical to physical addresses
B)Creates and maintains the communications link
C)Performs protocol conversion
D)Transmits raw data
Q4) Session
A)Translates logical to physical addresses
B)Creates and maintains the communications link
C)Performs protocol conversion
D)Transmits raw data
Q5) The native file system for Windows NT,2000,and XP is ________.
Q6) The TCP/IP model has ________ layers.
Q7) The OSI model has ________ layers. Page 8
To view all questions and flashcards with answers, click on the resource link above.
Page 9
Chapter 7: Investigating Windows, linux, and Graphic Files
Available Study Resources on Quizplus for this Chatper
57 Verified Questions
57 Flashcards
Source URL: https://quizplus.com/quiz/43041
Sample Questions
Q1) The ________ tracks those actions deemed as events by the software application.
Q2) When you send a job to the printer,Windows creates a(n)
A)Enhanced metafile (EMF)
B)Enhanced image file (IMF)
C)Temporary print file (TPF)
D)Tagged image format file (TIFF)
Q3) Temp files
A)Internet history files
B)Installed applications
C)Though used only briefly, they are not deleted
D)Data created by a user
Q4) The ________ subfolder lists the files that the user has accessed over several time periods.
Q5) Files are first loaded into a(n)________ before being printed.
Q6) Dentry object
A)Contain metadata for each file
B)Unit of allocation for storage
C)Created for every file system mounted
D)Contains information about the directory structure
Q7) By default,the ________ is used as virtual memory.
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 8: E-Mail and Webmail Forensics
Available Study Resources on Quizplus for this Chatper
47 Verified Questions
47 Flashcards
Source URL: https://quizplus.com/quiz/43042
Sample Questions
Q1) Because there is no one standard for instant messaging,
A)Messages often have widely differing formats
B)Both IM participants typically have to use the same chat software
C)IM is generally not used for business purposes
D)An investigator may have to use a generic program to access messages
Q2) E-mail attachments can be found within slack space by searching for
A)The keyword base64
B)The keyword base32
C)The keyword base16
D)The keyword base8
Q3) Which e-mail program comes with Microsoft Office?
A)Outlook
B)Outlook Express
C)Eudora
D)Office Notes
Q4) A check of the ________ will determine how long a company keeps e-mails.
Q5) E-mail software is a(n)________ program that works in concert with a(n)________.
Q6) Attachments are normally handled using a(n)_______ binary-to-text encoding scheme.
Page 11
Q7) A(n)________ server resolves domain names to IP addresses.
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Internet and Network Forensics and Intrusion Detection
Available Study Resources on Quizplus for this Chatper
39 Verified Questions
39 Flashcards
Source URL: https://quizplus.com/quiz/43043
Sample Questions
Q1) NFAT software can be configured to accept input from almost any device that generates a(n)________ file.
Q2) Server
A)Where the analysis is performed
B)Contains a large database
C)Modules installed on hosts
Q3) Which of the following is NOT a component of an NFAT system?
A)Agents
B)Server
C)Logs
D)Examiner computer
Q4) SPAN
A)Repeats any and all data
B)Duplicates data on any port and forwards it to the NFAT
C)Transmits and receives RF
D)Used like a cable splice
Q5) Application layer
A)Permits FTP or HTTP protocols
B)Acts like an IP filter
C)Acts as a mediator
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 10: Tracking Down Those Who Intend to Do Harm
on a Large Scale
Available Study Resources on Quizplus for this Chatper
39 Verified Questions
39 Flashcards
Source URL: https://quizplus.com/quiz/43044
Sample Questions
Q1) Instrumental in tracing the Melissa virus's origins were unique hardware numbers,known as ________,that were stored in Office 97 document files.
Q2) Cybercriminals are using hijacked computers to perform which of the following feats?
A)Spy on people
B)Spam people
C)Steal identities
D)All are being performed
Q3) Some military experts suggest that our future defense will rely more on __________ officers than on tanks and artillery.
Q4) How many computers was the bot-herder 0x80 said to control?
A)20,000 in 13 countries
B)20,000 in more than 13 countries
C)13,000 in more than 20 countries
D)20,000 in more than 20 countries
Q5) Another way to track criminals is in IRC ________.
Q6) A(n)________ program reads from one port and writes to another.
To view all questions and flashcards with answers, click on the resource link above. Page 13
Q7) ________ control these computer networks that often are the source of DoS attacks.
Chapter 11: Fraud and Forensic Accounting Investigation
Available Study Resources on Quizplus for this Chatper
40 Verified Questions
40 Flashcards
Source URL: https://quizplus.com/quiz/43045
Sample Questions
Q1) Charging separately for procedures that are actually part of a single procedure is an example of
A)Fraud committed for a company
B)Fraud committed against a company
C)Health care fraud
D)Occupational fraud
Q2) Which of the following is a specific element required to prove fraud?
A)A misleading statement
B)A victim's reliance on a false statement
C)Physical injury
D)A negative effect that did not cause damages
Q3) Which of the following is one of the purposes for a forensic fraud investigation?
A)Revision of an organization's earnings statements
B)Dispute analysis or litigation
C)Reduction of pressure on employees
D)Pursuit of hackers
Q4) Section 302 of the ________ Act compels companies to report all occupational fraud regardless of the amount of the loss.
Q5) Something is ________ if it is relevant and significant to the situation.
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 12: Federal Rules and Criminal Codes
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43046
Sample Questions
Q1) ________ can reveal a person's location using information from cell phone and cellular service provider.
Q2) USA PATRIOT Act
A)Requires that recordings be handed over to a judge
B)Forces ISPs to turn over names of suspected music pirates upon subpoena
C)Includes new guidance relating to computer crime and eevidence
D)Permits an ISP to look through stored e-mail messages
Q3) Authentication
A)Qualified experts may testify though not eyewitnesses
B)The evidence is valuable to an issue of the case
C)Keeps private attorney-client communications
D)The evidence is what it claims to be
E)Ruling against "out of court" statements
Q4) If records obtained by wiretap are not turned over to a judge in a reasonable amount of time,the records are
A)Still admissible
B)Sealed until the trial
C)Turned over to the subject of the wiretap or his legal representative
D)Inadmissible
Q5) The Frye test that Rule 702 relied upon was replaced with the ________ test.
Page 15
To view all questions and flashcards with answers, click on the resource link above.
Chapter 13: Ethical and Professional Responsibility in Testimony
Available Study Resources on Quizplus for this Chatper
30 Verified Questions
30 Flashcards
Source URL: https://quizplus.com/quiz/43047
Sample Questions
Q1) You can ensure the best reception of your evidence by maintaining a(n)________ demeanor at all times.
Q2) Before accepting a case,a good investigator will check
A)That there is enough money to make it worthwhile
B)That there are enough witnesses
C)That there are no physical dangers involved
D)That there is no conflict of interest
Q3) The _______ was designed to encourage witnesses to testify freely and honestly without fear of lawsuits arising from their testimony.
Q4) To impeach one's credibility a lawyer may attack all of the following EXCEPT
A)Your physical abilities
B)Your credentials
C)Your methods
D)Your written and/or verbal statements
Q5) ________ are done out of court but under the same oath as in court.
Q6) An expert witness is the only witness who
A)Can be deposed out of court
B)Can give an opinion about what happened without having been there
C)Always testifies for the defense
D)Always testifies for the prosecution
Page 16
To view all questions and flashcards with answers, click on the resource link above.
Page 17