Mixed Deck — All ADC Topics Flashcards

What risk does SQL injection pose?

Answer: Allows unauthorized access or manipulation of data.

SQL injection is a code injection technique used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution. This vulnerability allows attackers to bypass authentication, retrieve sensitive data, modify database content, or even gain full control over the database server, posing a severe security risk.

What is the primary purpose of a legal hold notice in a US litigation context involving digital evidence?

Answer: To notify relevant parties to preserve potentially relevant ESI from destruction

A legal hold suspends routine document destruction policies and obligates custodians to preserve ESI that may be relevant to anticipated or ongoing litigation.

What statistical output does the FTK case summary report provide?

Answer: Counts of file types, sizes, and evidence items processed

The FTK case summary report gives totals for each evidence category — documents, images, email, etc. — helping examiners prioritize their review.

When facing an unfamiliar challenge in automation & scripting within Access Data, what is the BEST approach?

Answer: Research established best practices, consult colleagues, and document the approach

Researching best practices and consulting colleagues combines established knowledge with practical experience, while documentation supports future reference.

In Access Data, how does automation & scripting contribute to professional credibility?

Answer: By demonstrating competence, maintaining standards, and delivering consistent results

Professional credibility is built through demonstrated competence, consistent adherence to standards, and reliable delivery of quality results.

Which AccessData feature allows investigators to filter evidence by file date ranges for focused analysis?

Answer: Date/time filter in the evidence tree or search options

FTK's date/time filters restrict the evidence view to a specific window, letting examiners focus on activity that occurred during a known incident period.

Which competency is MOST essential for professionals working in troubleshooting & problem resolution in Access Data?

Answer: Critical thinking combined with practical application of knowledge

Critical thinking allows professionals to apply knowledge effectively in varied situations, leading to better outcomes than rote procedures.

Which factor BEST indicates mastery of automation & scripting in Access Data?

Answer: The ability to adapt knowledge and skills to varying contexts while maintaining standards

True mastery is demonstrated by the ability to apply knowledge flexibly across different contexts while consistently maintaining quality standards.

What is the PRIMARY objective of automation & scripting within the Access Data profession?

Answer: To ensure quality outcomes through standardized practices and continuous improvement

The primary objective is ensuring quality outcomes through established standards while continuously improving practices and processes.

How should system architecture & design upgrades be managed in a Access Data environment?

Answer: Through a structured change management process with testing and rollback plans

A structured change management process with testing and rollback plans minimizes risk and ensures upgrades do not disrupt operations.

What is the PRIMARY benefit of continuous improvement in project planning & deployment for Access Data?

Answer: Enhanced efficiency, quality, and competitive advantage over time

Continuous improvement systematically enhances efficiency and quality, leading to sustained competitive advantage.

What is the principle of least privilege?

Answer: Users get minimum access rights.

The Principle of Least Privilege dictates that users, programs, or processes should be granted only the minimum necessary permissions to perform their specific tasks. This security best practice limits the potential damage from compromised accounts or systems, reducing the attack surface and preventing unauthorized actions.

Which FTK feature helps analysts identify duplicate files across an evidence set?

Answer: MD5/SHA hash comparison

FTK computes hash values for every file and groups identical hashes together, enabling rapid deduplication and identification of copied files.

How can you sort data in ascending or descending order in SQL?

Answer: ORDER BY

The `ORDER BY` clause in SQL is used to sort the result set of a query. You can specify one or more columns to sort by, and choose between ascending (`ASC`) or descending (`DESC`) order. This helps in presenting data in a structured and easily understandable manner, making it easier to analyze.

What is a trend line used for in data visualization?

Answer: Show direction or pattern in data.

A trend line is a straight or curved line used in charts to show the general direction or pattern of data over time or across categories. It helps to identify trends, predict future values, and understand the underlying relationship between variables, making complex data more interpretable.

What is the MOST effective way to stay current with developments in implementation & configuration for Access Data?

Answer: Participating in professional development, industry events, and peer collaboration

A multi-faceted approach including formal development, industry events, and peer collaboration provides the broadest perspective on current developments.

Cross-field validation checks which of the following?

Answer: That the relationship between two or more fields within a record is logically correct

Cross-field validation ensures that the combination of values across multiple fields is logically consistent, such as verifying that an end date is always after a start date.

What does 'data timeliness' refer to in the context of data quality?

Answer: The degree to which data is available and up-to-date when needed for use

Timeliness measures whether data is current and accessible at the moment it is needed for decision-making or processing.

What is the significance of entropy analysis in FTK examinations?

Answer: High entropy values may indicate encrypted or compressed data

High Shannon entropy means data bytes are distributed nearly randomly, a hallmark of encryption or compression that warrants further investigation.

Which technique is used to standardize inconsistently formatted data values, such as converting 'United States,' 'US,' and 'U.S.A.' to a single canonical form?

Answer: Data parsing and standardization

Data parsing and standardization breaks down free-form values and maps them to a consistent, canonical format based on defined rules or reference tables.