JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD
JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD B.Tech IV COMPUTER FORENSICS Previous Question Paper (July/August - 2022 - R16)
Answer any five questions. All questions carry equal marks.
Main
Explain about computers roles in crimes.
Answer
Computers play a multifaceted role in criminal activities, acting as the target, the tool, or the repository of evidence. These roles define how digital forensic investigations are approached.
1. Computer as the Target: In this scenario, the computer system itself is the victim of a crime. This includes unauthorized access, data theft, denial-of-service attacks, or the installation of malware to disrupt services. The objective is to compromise the integrity, confidentiality, or availability of the system.
2. Computer as the Tool (Instrument): The computer is used as a means to facilitate traditional crimes or cyber-specific offenses. Examples include using a computer to conduct fraud, distribute illegal content, engage in identity theft, harass individuals, or coordinate criminal activities through encrypted communication. Here, the computer is the mechanism through which the perpetrator executes the illegal act.
3. Computer as the Repository (Evidence): Computers often serve as a witness or a storage device for evidence related to both cyber and non-cyber crimes. Even if a crime is committed in the physical world, digital devices may contain logs, emails, documents, or metadata that provide crucial evidence. This includes evidence of planning, communication between conspirators, or digital footprints left behind by the perpetrator.
4. Computer as a Symbol: In some instances, the computer or the data it holds is used to intimidate or threaten victims, such as in cases of cyber-stalking or extortion, where the device becomes a symbol of the perpetrator's power over the victim.
Understanding these roles is essential for forensic examiners to determine the scope of the investigation, identify the necessary digital artifacts to collect, and establish the chain of custody required to present evidence in a court of law.
What are the goals of incident response?
Answer
The primary goals of incident response are to provide a structured approach to managing the aftermath of a security breach or cyberattack to limit damage and reduce recovery time and costs. Key objectives include:
- Containment: Preventing the incident from spreading further across the network or causing additional damage to systems and data.
- Eradication: Identifying and removing the root cause of the incident, such as deleting malicious code, disabling compromised accounts, or patching vulnerabilities.
- Recovery: Restoring systems, services, and data to normal operation while ensuring that the environment is secure from further exploitation.
- Evidence Preservation: Collecting and documenting digital evidence in a forensically sound manner to support potential legal action or internal investigations.
- Lessons Learned: Conducting a post-incident analysis to identify weaknesses in security posture and improve future response capabilities and preventive measures.
Explain about viruses.
Answer
Sign in to view the complete answer paper.
Explain the steps to use for data collection from Windows system.
Answer
Sign in to view the complete answer paper.
What is a restored image?
Answer
Sign in to view the complete answer paper.
What is a mirror image?
Answer
Sign in to view the complete answer paper.
Explain the methods for validating forensic data.
Answer
Sign in to view the complete answer paper.
Explain the steps in the general procedure for a live acquisition.
Answer
Sign in to view the complete answer paper.
Explain about the tasks performed by digital forensics tools.
Answer
Sign in to view the complete answer paper.
Explain the examining NTFS disks.
Answer
Sign in to view the complete answer paper.
What is windows registry?
Answer
Sign in to view the complete answer paper.