Download NWIT 263 Quiz 2: Operating Systems Concepts and Tools and more Exams Forensics in PDF only on Docsity!
NWIT 263 Quiz 2 With Accurate Solutions 100% Verified
what does it men when an operating system is labeled as a 'Live' version? - ANSWER it means that the operating system is designed to run from memory
which of the following types of tools would one except NOT to find in Kali's Forensics Mode? - ANSWER formatting tools
which of the following statements best describe the 'hives' found in the Windows Registry? - ANSWER - they are logical groups of keys, subways, and values
- they consist of many files
how is the distance between a hard drive and its read-write head measured? - ANSWER in nanometers (nm)
which windows utility is most commonly used to edit the Windows Registry on a Windows 10 system? - ANSWER regedit
which of the following best describes the concept of a 'clean room'? - ANSWER - it is a space with highly filtered air
- it is a space where the presence of airborne particles is reduced
which of the following best describes the concept of a 'process' that would be found in both Linux and Windows operating systems? - ANSWER it is an instance of a running executable
one can boot a computer off of a bootable ISO by either altering the computer's boot sequence in the BIOS/UEFI or by pressing a key that is specific to the computer while the computer is booting. - ANSWER true
which component of a computer or operating system assigns the process identifier (PID) to the process? - ANSWER the kernel
which of the following types of application can run several processes at once? - ANSWER web browser
one can boot from any version of Kali and be able to access its 'Forensic Mode'. - ANSWER false
which of the following files could be used to import new keys and values into the Registry of a Windows 10 system? - ANSWER import.reg
because Kali's tools are constantly being added and removed, one can visit the Kali Linux Tools listing at https://tools.kali.org/tools-listing to see the tools it currently supports. - ANSWER true
which of the following become 'processes' after they are launched in an operating system? - ANSWER - applications
which of the following best describes the concept of the 'boot sequence', which is configured in a computer's BIOS/UEFI? - ANSWER it specifies the order of the locations the computer should search for an operating system when the system boots
which storage technology is rapidly replacing. mechanical hard drives (also known as spinners) on desktops and laptops? - ANSWER solid-state storage
which of the following best describes what is done when one performs a 'quick format' on media? - ANSWER it does not scan the media for bad sectors
traditional hard disk drives (spinners) do not permit air to enter their cases - ANSWER false
which of the following would one not be able to monitor using Windows Task Manager? - ANSWER the thread activity of a process
