Certified Digital Forensics Examiner — Requirements & Free Practice
US · License preparation
100 free questions · Answer explanations · No signup required
Loading selected examination banks…
Choose what to practice
Start with an exam below. Your examination requirements depend on your application pathway. View licensing requirements
Licenses, application pathways and examination requirements
Each license and applicant pathway has its own requirements and exemptions. Choosing practice questions does not determine your eligibility.
Certified Digital Forensics Examiner
Mile2 certification in digital forensics requiring a minimum 70% certification examination grade.
Licensing authority: Mile2 · Application information
Initial by examination
- Account and seat
- Hold valid purchased or otherwise issued examination access and use the personal Mile2 account/LMS. Retail Exam Combo includes two attempts, an exam prep guide and simulator. Technical requirements specify uninterrupted high-speed Internet and the latest Google Chrome.
- Delivery
- Standard online on-demand access; current FAQ identifies C)ISSO-A and C)PTE-A as exceptions requiring scheduled live online proctors. Their accredited eligibility and delivery scheme is not assigned to CDFE.
- Ethics
- Candidates must read, understand and comply with Mile2's Code of Ethics and Certification Holder Agreement under current terms section 5.
- Examination
- Pass the single CDFE multiple-choice certification examination with a minimum grade of 70%.
- Practical and writing
- Seventeen labs and instructor-led/self-study/virtual formats are training options in the same outline. Exam Information defines one multiple-choice examination without a separate scored practical, performance or writing examination; no lab is invented as an examination leaf.
- Training and prerequisites
- Course completion is not required. One year of computer experience, Mile2's C)SP course and Foundational Course Pack appear as suggested prerequisites, not mandatory certifications. No prerequisite investigation or production is created.
- Validity
- Initial certification route only. The outline describes a three-year individual certification expiry, not a retirement boundary for the exam. No examination-version deadline was located; no date is invented from access periods or requested availability windows.
Certified Digital Forensics Examiner
- Provider
- Mile2
- Format
- Online multiple-choice examination through the candidate's Mile2 account; standard on-demand access, distinct from the live-proctored -A offerings.
- Exam questions
- Total questions: 100.
- Time limit
- Approximately 2 hours
- Passing score
- Minimum grade of 70%
Examination outline
Computer Forensics Incidents
- Origins of digital forensic science
- Legal System
- Types of Cybercrime Incidents
- Internal and external threats
Computer Forensic Investigative Theory
- Investigative Theory
- Investigative Concepts
- Behavioral evidence analysis (BEA) & Equivocal Forensic Analysis (EFA)
Computer Forensic Prerequisites and Standards
- Investigative Prerequisites
- Scene Management
- Industry Standards
Computer Forensic Investigative Process
- Foundations of the Digital Forensics Process
- Identification & Scope
- Collection & Preservation
- Examination
- Analysis & Interpretation
- Documentation & Interim Reporting
- Quality Control & Review
Forensic Examination/Evidence Protocols
- Science Applied to Forensics
- Digital Evidence Categories
- Evidence Admissibility
Digital Acquisition and Analysis Tools
- Acquisition Procedures
- Computer forensics field triage process model (CFFTPM)
- Evidence Authentication
- Forensic Tools
- AI and Forensics
Disks and Storages
- Disk OS and Filesystems
- Spinning Disks Forensics
- SSD Forensics (IoT-Mention)
- Cloud Storage
- Handling Damaged Drives
Live Acquisitions
- Live Acquisition
- Windows Acquisition
- MacOS Acquisition
- Linux/UNIX Acquisition
- Cloud/Virtualization Acquisition
Windows Forensics
- Windows Event Viewer Overview
- EVTX and EVT Logs
- Logs Analysis to Identify Breaches and Attacks
Linux Forensics
- Linux Artifacts
MAC Forensics
- OSX Artifacts
Specialized Artifact Recovery
- Windows Components with Investigative Interest
- Files Containing Historical Information
- Web Forensics
- Memory Forensics
Advanced Search Strings and File Signatures
- Search Strings
- REGEX (Regular Expressions)
- Files Signatures (Formats, Headers, and HEX Analysis)
Mobile Forensics
- Forensic Process
- Tools
- IoT and Wearables
- Legal Considerations
eDiscovery
- eDiscovery
- Laws and Regulations
- eDiscovery Process
Computer Forensic Laboratory Protocols
- Forensics Workstation Prep
- Forensics Lab Standard Operating Procedures
- Quality Assurance
- Quality Control
- Peer Review
- Annual Review
- Deviations
- Lab Intake
Digital Evidence Presentation and Reporting
- The Best Evidence Rule
- Hearsay
- Authenticity and Alteration
- Report Sections and Content
Examination sources
- Mile2 CDFE exam product
CDFE product title; the same product's embedded viewer configuration is titled Outline: C)DFE and links CDFE-Web-Outline.pdf
- Mile2 CDFE outline
pp. 4–6, complete Detailed Outline
- Mile2 CDFE outline
p. 2, Key Course Information
- Mile2 CDFE outline
p. 3, Exam Information (middle column)
- Mile2 CDFE exam product
product title and Exam Combo Includes
- Mile2 FAQ
Certification Exam, training requirement
- Mile2 FAQ
Certification Exam, online exams and remote proctors
- Mile2 FAQ
Certification Exam, Exam Combo contents
- Mile2 technology requirements
p. 1, Online Mile2 Exams