MCQs: Emerging Trends – Unit 3 Digital Forensics

1. systematic tracking of incoming and outgoing traffic: to ascertain how an attack was carried out or how an event occurred on a network. -intruders and network users often leave trail behind -identify locations where relevant digital evidence exists -crucial when developing data map of digital evidence

• A. SIM Cards
• B. Windows Registry
• C. Network Forensics
• D. Drive Slack

2. a logical drive

• A. EEPROM
• B. PDA's
• C. SIM Cards
• D. Partition

3. Considerations -determine the scope of the investigation. -determine what the case requires -whether you should collect all info -what to do in case of scope creep

• A. Examination Plan
• B. Drive Slack
• C. Partition
• D. SIM Cards

4. Can be exported as: -RTF ~good for thumbnails and book marks -TEXT~plain text

• A. Drive Slack
• B. Write Blockers
• C. Windows Registry
• D. ProDiscover Report

5. electronically erasable programmable read-only memory -how phones store system data -enables service providers to reprogram phones without having to physically access memory chips -OS is stored in ROM: nonvolatile memory

• A. Partition
• B. file system
• C. EEPROM
• D. SIM Cards

6. file manipulation: file names and extensions/ hidden property -disk manipulation: hidden partitions/bad clusters -encryption: bit shifting/stenography

• A. Windows Registry
• B. Examination Plan
• C. Virtual Machine
• D. Data-hiding Techniques

7. gives us a road map to data on a disk -type of file system an OS used determines how data is stored on the disk

• A. file system
• B. Drive Slack
• C. EEPROM
• D. SIM Cards

8. a database that stores hardware and software configuration information, network connections, user preferences, and setup information. -can contain valuable info about current/past applications and user created information

• A. SIM Cards
• B. Windows Registry
• C. file system
• D. Write Blockers

9. unused space in a cluster between the end of an active file and the end of a cluster. (Includes RAM slack and file slack)

• A. SIM Cards
• B. file system
• C. Write Blockers
• D. Drive Slack

10. Which one of the following offers CPUs as integrated memory or peripheral interfaces?

• A. Microcontroller
• B. Microprocessor
• C. Embedded system
• D. Memory system

11. Which of the following offers external chips for memory and peripheral interface circuits?

• A. Microcontroller
• B. Microprocessor
• C. Peripheral system
• D. Embedded system

12. How many bits does an MC6800 family have?

• A. 16
• B. 32
• C. 4
• D. 8

13. Which of the following is a 4-bit architecture?

• A. MC6800
• B. 8086
• C. 80386
• D. National COP series

14. What is CISC?

• A. Computing instruction set complex
• B. Complex instruction set computing
• C. Complimentary instruction set computing
• D. Complex instruction set complementary

15. How is the protection and security for an embedded system made?

• A. OTP
• B. IPR
• C. Memory disk security
• D. Security chips

16. Which of the following possesses a CISC architecture?

• A. MC68020
• B. ARC
• C. Atmel AVR
• D. Blackfin

17. Which of the following is a RISC architecture?

• A. 80286
• B. MIPS
• C. Zilog Z80
• D. 80386

18. Which one of the following is board based system?

• A. Data bus
• B. Address bus
• C. VMEbus
• D. DMA bus

19. VME bus stands for

• A. Versa module Europa bus
• B. Versa module embedded bus
• C. Vertical module embedded bus
• D. Vertical module Europa bus

20. Which of the following has a Harvard architecture?

• A. EDSAC
• B. SSEM
• C. PIC
• D. CSIRAC

21. What are the essential tight constraint/s related to the design metrics of an embedded system?

• A. Ability to fit on a single chip
• B. Low power consumption
• C. Fast data processing for real-time operations
• D. All of the above

22. Which abstraction level undergo the compilation process by converting a sequential program into finite-state machine and register transfers while designing an embedded system?

• A. System
• B. Behaviour
• C. RT
• D. Logic

23. Which characteristics of an embedded system exhibit the responsiveness to the assortments or variations in system's environment by computing specific results for real-time applications without any kind of postponement ?

• A. Single-functioned Characteristic
• B. Tightly-constraint Characteristics
• C. Reactive & Real time Characteristics
• D. All of the above

24. Is the following instruction correct LDI R3,50?

• A. Yes
• B. No
• C. Cant be said
• D. None of the mentioned

25. Registers R0-R31 are used for what type of works?

• A. they are used for arithmetic and logic instructions
• B. they are used for data copy
• C. they are used for calculations
• D. none of the mentioned

26. The largest value that can be loaded in an 8 bit register is?

• A. 11111111H
• B. FH
• C. FFH
• D. 00H

27. Which out of the following instructions don’t affect the flags of the status register?

• A. AND
• B. INC
• C. OR
• D. ADD

28. Which out of the following is not a directive?

• A. .EQU
• B. .DEVICE
• C. .ORG
• D. .LDI

29. Is an assembly language a high level language?

• A. Yes
• B. No
• C. Cant be said
• D. None of the mentioned

30. A 14 bit program counter can execute a maximum of _________ memory locations?

• A. 4K
• B. 8K
• C. 16K
• D. 64K

31. When AVR wakes up, then the value of PC becomes?

• A. 00H
• B. 000H
• C. 0000H
• D. 00000H