CSFA logo
Focused certification exam prep
About FAQ View plans
Questions, answered

CSFA practice questions - frequently asked questions

Plain answers about how CSFA Exam Prep works: the exam, the questions, pricing, the free trial, and what you actually get.

No - and you should be wary of any site claiming otherwise. Every question here is original, written to mirror the style, difficulty, and judgment the real CSFA exam tests. Each one comes with a plain-language explanation of why the right answer is right and the others aren't.

The CSFA exam spans 30 domains: Active, archival and latent data; Affidavits, motions, and subpoenas; Compact Disc analysis; Conducting keyword boolean searches; Creating understandable and accurate reports; Creating forensically sound working copies or images of media; Documentation, chain of custody, and evidence handling procedures; FAT 16/32 file systems; File Headers and Footers; File slack, ram slack, drive slack, and unallocated space; Hashes and Checksums; Imaging handheld devices; Insurance/liability issues; Interpretation of various log formats; Interpreting Internet History and HTTP concepts; Manual and automated data recovery; Metadata for Microsoft Office and PDF documents; NTFS; Overcoming encryption mechanisms and password protection; PC hardware concepts; Privacy issues; Rules of evidence; TCP/IP concepts; Windows print spool files; Windows Prefetch; Windows registry; Windows shortcuts; Windows swap file; Windows Volume Shadow Copy; Working as an expert technical witness. Every practice question on this site is tagged to one of these domains.

Try 10 free questions View plans