Discuss WGU Digital Forensics In Cybersecurity (D829) Exam Topic 3 Question 7

Thomas received an email stating he needed to follow a link and verify his bank account information to ensure it was secure. Shortly after following the instructions, Thomas noticed money was missing from his account.

Which digital evidence should be considered to determine how Thomas' account information was compromised?

AEmail messages

BBrowser cache

CBank transaction logs

DFirewall logs

Suggested Answer: A

Comprehensive and Detailed Explanation From Exact Extract:

The email messages, including headers and content, contain information about the phishing attempt, such as sender details and embedded links. Analyzing these messages can help trace the source of the scam and determine the method used to deceive the victim.

Email headers provide metadata for tracking the origin.

Forensic examination of emails is fundamental in investigating social engineering and phishing attacks.

NIST SP 800-101 and forensic email analysis protocols recommend thorough email message examination in phishing investigations.

Get Premium Digital Forensics in Cybersecurity (D829) Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

33 comments · newest first

Tequila 2 days ago

Agreed, but B is also important. It shows what sites he visited.

Jacquelyne 7 days ago

I think A is crucial. The email is the starting point.

Mollie 12 days ago

D might help, but it’s less relevant than the others.

Jose 17 days ago

C is key too. We need to see the transactions.

Viola 23 days ago

I agree, but B is also important. It shows what sites he visited.

Salina 28 days ago

I think A is crucial. The email is the starting point.

Thaddeus 1 month ago

C) Bank transaction logs can show the missing money details.

Yoko 1 month ago

But B) Browser cache might show what he clicked on.

Elmira 1 month ago

Agreed, the email is where it all started.

Audria 2 months ago

I think A) Email messages are crucial.

Theola 2 months ago

Firewall logs? I doubt they’d help much in this case.

Izetta 2 months ago

Bank transaction logs are crucial for tracking the missing money.

Rusty 2 months ago

Wait, are we sure he even clicked the right link?

Son 2 months ago

I think the browser cache could show what he clicked on.

Ivory 2 months ago

Definitely check the email messages first.

Latricia 3 months ago

Firewall logs? Not sure how that would help in this case.

Peter 3 months ago

Transaction logs are crucial to see where the money went.

Jerrod 3 months ago

Wait, how did he not see that it was a phishing email?

Johanna 3 months ago

I think the browser cache could show what he clicked on.

Brande 3 months ago

Definitely check the email messages first.

Horace 4 months ago

Firewall logs? Not sure how that would help in this case.

Juliann 5 months ago

Bank transaction logs are crucial to track the missing money.

Lai 5 months ago

Wait, how did he not see it was a phishing attempt?

Jani 5 months ago

I think the browser cache could show what he clicked on.

Veronika 6 months ago

Definitely the email messages, that's where it all started.

Annamaria 6 months ago

Firewall logs might not be relevant since they usually track incoming and outgoing traffic, but I guess they could show if any suspicious activity occurred.

Belen 6 months ago

Bank transaction logs could help identify when the money was taken, but I feel like the email is more directly related to the compromise.

Joseph 6 months ago

I'm not entirely sure, but I remember something about browser cache possibly holding the link he clicked on.

Joanna 6 months ago

I think email messages are crucial here since that's how the phishing attempt started.

Louvenia 6 months ago

I wonder if firewall logs would show anything relevant. I think they might help, but I can't remember if they track outgoing connections like that.

Tiera 7 months ago

Bank transaction logs could be important too, but I feel like they won't tell us how the information was compromised, just what happened after.

Leandro 7 months ago

I'm not so sure about the browser cache. I remember something about it being useful, but I can't recall exactly how it relates to phishing.

Yolande 7 months ago

I think we should definitely look at the email messages first. That seems like the most direct evidence of how he got tricked.

WGU Digital Forensics in Cybersecurity (D829) Exam - Topic 3 Question 7 Discussion