CHFI Anti-Forensics Techniques

Question 1

What is the primary goal of anti-forensics techniques?

Accepted Answer

To prevent, destroy, or obfuscate digital evidence

Answer

Anti-forensics techniques are designed to prevent, destroy, or obfuscate digital evidence to hinder forensic investigations and avoid attribution.

Question 2

Which technique involves overwriting storage media multiple times with random data patterns to prevent file recovery?

Accepted Answer

Secure wiping (data sanitization)

Answer

Secure wiping overwrites storage media multiple times with random data patterns, making the original data unrecoverable even with advanced forensic tools.

Question 3

What does 'timestomping' refer to in anti-forensics?

Accepted Answer

Modifying file metadata timestamps to mislead timeline analysis

Answer

Timestomping involves modifying a file's MAC (Modified, Accessed, Created) timestamps to mislead forensic investigators about when events occurred.

Question 4

Which of the following is a commonly used Windows tool for secure file deletion that supports multiple overwrite passes?

Accepted Answer

Eraser

Answer

Eraser is a widely used Windows tool that performs secure file deletion by overwriting files with multiple passes of random data, making recovery infeasible.

Question 5

What does steganography refer to in the context of anti-forensics?

Accepted Answer

Hiding data within other seemingly innocent files such as images or audio

Answer

Steganography involves hiding secret data within ordinary files like images, audio, or video so that the existence of the hidden data is concealed from investigators.

CHFI - Computer Hacking Forensic Investigator Practice Test

CHFI - Computer Hacking Forensic Investigator Practice Test

CHFI Anti-Forensics Techniques