Free Preparation Discussions
MENU
WGU Digital Forensics in Cybersecurity (D829) Exam Questions
- Topic 1: Domain Digital Forensics in Cybersecurity: This domain measures the skills of Cybersecurity technicians and focuses on the core purpose of digital forensics in a security environment. It covers the techniques used to investigate cyber incidents, examine digital evidence, and understand how findings support legal and organizational actions.
- Topic 2: Domain Evidence Analysis with Forensic Tools: This domain measures skills of Cybersecurity technicians and focuses on analyzing collected evidence using standard forensic tools. It includes reviewing disks, file systems, logs, and system data while following approved investigation processes that ensure accuracy and integrity.
- Topic 3: Domain Recovery of Deleted Files and Artifacts: This domain measures the skills of Digital Forensics Technicians and focuses on collecting evidence from deleted files, hidden data, and system artifacts. It includes identifying relevant remnants, restoring accessible information, and understanding where digital traces are stored within different systems.
- Topic 4: Domain Incident Reporting and Communication: This domain measures the skills of Cybersecurity Analysts and focuses on writing incident reports that present findings from a forensic investigation. It includes documenting evidence, summarizing conclusions, and communicating outcomes to organizational stakeholders in a clear and structured way.
- Topic 5: Domain Legal and Procedural Requirements in Digital Forensics: This domain measures the skills of Digital Forensics Technicians and focuses on laws, rules, and standards that guide forensic work. It includes identifying regulatory requirements, organizational procedures, and accepted best practices that ensure an investigation is defensible and properly executed.
Free WGU Digital Forensics in Cybersecurity (D829) Exam Actual Questions
Note: Premium Questions for Digital Forensics in Cybersecurity (D829) were last updated On Oct. 15, 2026 (see below)
Which file system is supported by Mac?
Comprehensive and Detailed Explanation From Exact Extract:
Mac systems traditionally use the Hierarchical File System Plus (HFS+), which supports features such as journaling and metadata handling suited for Mac OS environments. Newer versions use APFS but HFS+ remains relevant.
NTFS is primarily a Windows file system.
EXT4 is a Linux file system.
FAT32 is a generic cross-platform file system but lacks advanced features.
Apple and NIST documentation confirm HFS+ as a Mac-supported file system for forensic analysis.
Which description applies to the Advanced Forensic Format (AFF)?
Comprehensive and Detailed Explanation From Exact Extract:
The Advanced Forensic Format (AFF) is an open file format designed for storing disk images and related forensic metadata. It was developed by the Sleuth Kit community and is supported by forensic tools such as Sleuth Kit and Autopsy. AFF allows efficient storage, compression, and metadata annotation, which makes it suitable for forensic investigations.
AccessData is known for FTK format, not AFF.
iLook uses proprietary formats unrelated to AFF.
Guidance Software developed the EnCase Evidence File (E01) format.
AFF is widely recognized in open-source forensic toolchains.
The AFF format and its use with Sleuth Kit and Autopsy are documented in digital forensics literature and the AFF official documentation, as endorsed by the NIST and forensic tool developer communities.
An employee sends an email message to a fellow employee. The message is sent through the company's messaging server.
Which protocol is used to send the email message?
Comprehensive and Detailed Explanation From Exact Extract:
SMTP (Simple Mail Transfer Protocol) is the protocol used to send email messages from a client to a mail server or between mail servers. It handles the transmission of outgoing mail. IMAP and POP3 are protocols used for retrieving email, not sending it. SNMP is used for network management.
IMAP and POP3 are for receiving emails.
SNMP is unrelated to email delivery.
This is documented in RFC 5321 and supported by all standard email system operations, including forensic analyses.
Which Windows 7 operating system log stores events collected from remote computers?
Comprehensive and Detailed Explanation From Exact Extract:
The ForwardedEvents log in Windows 7 is specifically designed to store events collected from remote computers via event forwarding. This log is part of the Windows Event Forwarding feature used in enterprise environments to centralize event monitoring.
The System and Application logs store local system and application events.
The Security log stores local security-related events.
ForwardedEvents collects and stores events forwarded from other machines.
Microsoft documentation and NIST SP 800-86 mention the use of ForwardedEvents for centralized event log collection in investigations.
Which operating system creates a swap file to temporarily store information from memory on the hard drive when needed?
Comprehensive and Detailed Explanation From Exact Extract:
Windows uses a swap file (commonly called pagefile.sys) to extend physical memory (RAM) by temporarily storing data from memory to disk when RAM is insufficient. This allows the system to handle more data than the available RAM.
Linux and Unix typically use dedicated swap partitions or swap files but refer to them differently and manage them in other ways.
Mac OS X uses a paging file system but does not typically use a 'swap file' in the Windows sense; it uses dynamic paging files instead.
The terminology 'swap file' is most commonly associated with Windows.
Microsoft Windows forensics guidelines and NIST documentation describe the page file's role in virtual memory management in Windows operating systems.
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Joseph Thompson
28 days agoRyan Hall
2 months agoCharles Roberts
2 months agoBrian Rodriguez
3 months agoPatricia Johnson
3 months agoKaren Torres
4 months agoSharon Lewis
4 months agoKaren Sanchez
5 months agoKimberly Roberts
5 months agoTiffany King
5 months agoNancy Cook
6 months agoMatthew Campbell
6 months agoJessica Lewis
6 months agoMark Rogers
5 months agoJason Adams
6 months agoTimothy Morris
5 months agoNieves
7 months agoKeena
7 months agoYvonne
7 months agoCarylon
7 months agoLorean
7 months agoStefanie
8 months agoNelida
8 months agoRikki
8 months agoMarlon
9 months agoMartina
9 months agoRoselle
9 months agoMoon
9 months agoNorah
10 months agoChristiane
10 months agoWillard
10 months agoSabrina
10 months agoTammy
11 months agoLorrie
11 months agoCharlena
11 months agoAnisha
11 months ago