Prepare for the Computer Hacking Forensic Investigator (CHFI) certification by EC-Council with free exam-style practice questions on CyberCertPrep. The CHFI exam has 150 questions, a time limit of CHFI hours, and a passing score of 70%.
Choose from Practice mode, Exam Simulation, Weak Areas review, and Daily Challenge. Track your progress with detailed analytics and study with flashcards.
Computer Hacking Forensic Investigator (CHFI) Exam Domain
Focus your study on this domain with targeted practice questions. This domain accounts for 20% of your CHFI exam score.
The OS Forensics (Windows/Linux/Mac) domain is one of 6 exam domains on the Computer Hacking Forensic Investigator (CHFI) certification exam by EC-Council. At 20% of the total exam, this is one of the most heavily weighted domains — mastering it is critical for passing.
The CHFI exam consists of 150 questions with a time limit of 4 hours and a passing score of 70%. That means approximately 30 questions on your exam will come from the OS Forensics (Windows/Linux/Mac) domain.
Packet Sniffing
The practice of capturing and analyzing network traffic data packets as they travel across a network using tools like Wi...
Rootkit
A collection of software tools that enables unauthorized access to a computer while actively hiding its presence from th...
Digital Forensics
The scientific examination, collection, preservation, and analysis of digital evidence from computers, networks, mobile ...
Chain of Custody
The documented and unbroken process of maintaining and controlling evidence to preserve its integrity and admissibility ...
Volatile Memory
Computer memory (RAM) that loses its contents when power is removed, making it a time-critical source of forensic eviden...
Log Analysis
The examination of system, application, network, and security logs to identify security events, anomalies, policy violat...
Chain of Custody
The documented process that tracks the movement and handling of evidence from collection through legal proceedings to en...
Digital Forensics
The application of scientific methods to preserve, collect, analyze, and present digital evidence from computers, mobile...
These certifications also cover topics related to OS Forensics (Windows/Linux/Mac):