312-49v10 — Most Debated Topics

Community-voted ranking of 19 topics, sorted by disagreement level. Higher dispute = more test-takers disagree on the answer.

#1
Which Tor Relay Should Investigators Focus On to Trace Data Origin?
S-Grade Dispute: 50% 5 comments
#2
Which Acquisition Type Fits a Cloud-Based Incident Investigation?
A-Grade Dispute: 50% 3 comments
#3
Which Windows Artifact Best Reveals Deleted Folders and Mounted Drives?
S-Grade Dispute: 33% 6 comments
#4
Which Tool Extracts Passwords and Hashes from SAM and SYSTEM Files?
A-Grade Dispute: 33% 4 comments
#5
What Is the First Forensic Step for an Android Smartwatch?
A-Grade Dispute: 33% 3 comments
#6
What Is an "Idle" System in an IP ID Idle Scan?
S-Grade Dispute: 29% 6 comments
#7
Remote Linux RAM Acquisition with LiME and Netcat?
S-Grade Dispute: 25% 5 comments
#8
How Should an Investigator Examine a Password-Protected Packed Executable?
S-Grade Dispute: 25% 6 comments
#9
What Is the First Step When Searching a Cybercrime Scene for Evidence?
A-Grade Dispute: 25% 4 comments
#10
Sparse or Bit-Stream Acquisition for Email Files and Deleted Fragments?
S-Grade Dispute: 20% 5 comments
#11
Why Were 14-Character Passwords Cracked So Quickly?
S-Grade Dispute: 12% 5 comments
#12
What Type of Cipher Uses a Hole-Punched Plastic Template?
A-Grade Dispute: 0% 3 comments
#13
What Is the Smallest Physical Storage Unit on a Hard Drive?
A-Grade Dispute: 0% 3 comments
#14
Where Does EnCase Search to Recover NTFS Files and Folders?
A-Grade Dispute: 0% 3 comments
#15
Which Windows tool displays local and remote logged-on users?
A-Grade Dispute: 0% 3 comments
#16
Which MySQL Utility Recovers a MyISAM Log File?
A-Grade Dispute: 0% 3 comments
#17
Which Item Is NOT Considered Physical Evidence?
A-Grade Dispute: 0% 3 comments
#18
Which Volatility Plugin Identifies Hidden Processes and Injected DLLs?
A-Grade Dispute: 0% 4 comments
#19
What Is a Drive-by Download Attack?
A-Grade Dispute: 0% 3 comments

← Back to 312-49v10 Study Guide