OpenExamsFREE PRACTICE — ANY EXAM

Certified Digital Forensics Examiner — Information & Free Practice

100 free questions · Answer explanations · No signup required

Start free practice →

Exam Review

About Certified Digital Forensics Examiner

Certified Digital Forensics Examiner · US

Key exam facts

Provider
Mile2
Format
Online multiple-choice examination through the candidate's Mile2 account; standard on-demand access, distinct from the live-proctored -A offerings.
Exam questions
Total questions: 100.
Time limit
Approximately 2 hours
Passing score
Minimum grade of 70%

Topics covered

  • Computer Forensics Incidents

    • Origins of digital forensic science
    • Legal System
    • Types of Cybercrime Incidents
    • Internal and external threats

  • Computer Forensic Investigative Theory

    • Investigative Theory
    • Investigative Concepts
    • Behavioral evidence analysis (BEA) & Equivocal Forensic Analysis (EFA)

  • Computer Forensic Prerequisites and Standards

    • Investigative Prerequisites
    • Scene Management
    • Industry Standards

  • Computer Forensic Investigative Process

    • Foundations of the Digital Forensics Process
    • Identification & Scope
    • Collection & Preservation
    • Examination
    • Analysis & Interpretation
    • Documentation & Interim Reporting
    • Quality Control & Review

  • Forensic Examination/Evidence Protocols

    • Science Applied to Forensics
    • Digital Evidence Categories
    • Evidence Admissibility

  • Digital Acquisition and Analysis Tools

    • Acquisition Procedures
    • Computer forensics field triage process model (CFFTPM)
    • Evidence Authentication
    • Forensic Tools
    • AI and Forensics

  • Disks and Storages

    • Disk OS and Filesystems
    • Spinning Disks Forensics
    • SSD Forensics (IoT-Mention)
    • Cloud Storage
    • Handling Damaged Drives

  • Live Acquisitions

    • Live Acquisition
    • Windows Acquisition
    • MacOS Acquisition
    • Linux/UNIX Acquisition
    • Cloud/Virtualization Acquisition

  • Windows Forensics

    • Windows Event Viewer Overview
    • EVTX and EVT Logs
    • Logs Analysis to Identify Breaches and Attacks

  • Linux Forensics

    • Linux Artifacts

  • MAC Forensics

    • OSX Artifacts

  • Specialized Artifact Recovery

    • Windows Components with Investigative Interest
    • Files Containing Historical Information
    • Web Forensics
    • Memory Forensics

  • Advanced Search Strings and File Signatures

    • Search Strings
    • REGEX (Regular Expressions)
    • Files Signatures (Formats, Headers, and HEX Analysis)

  • Mobile Forensics

    • Forensic Process
    • Tools
    • IoT and Wearables
    • Legal Considerations

  • eDiscovery

    • eDiscovery
    • Laws and Regulations
    • eDiscovery Process

  • Computer Forensic Laboratory Protocols

    • Forensics Workstation Prep
    • Forensics Lab Standard Operating Procedures
    • Quality Assurance
    • Quality Control
    • Peer Review
    • Annual Review
    • Deviations
    • Lab Intake

  • Digital Evidence Presentation and Reporting

    • The Best Evidence Rule
    • Hearsay
    • Authenticity and Alteration
    • Report Sections and Content

How to prepare

Work through the topics, read the explanation after each answer, and revisit the areas where you miss questions. Use the official outline and reference materials below to guide your study.

These independent practice questions are not actual exam items and do not guarantee a passing result.

Frequently asked questions

What is the exam format?

Online multiple-choice examination through the candidate's Mile2 account; standard on-demand access, distinct from the live-proctored -A offerings.

How many questions are on the exam?

Total questions: 100.

How long is the exam?

Approximately 2 hours

What is the passing score?

Minimum grade of 70%

Official sources and references

Confirm current exam arrangements with the exam provider.