112-57 practice question 15 of 15

Which of the following tools helps a forensics investigator develop and test across multiple operating systems in a virtual machine for Mac and allows access to Microsoft Office for Windows?

Full set: 75 questions
Answer options
A: Riverbed Modeler
B: Parallels Desktop 16 Correct answer
C: Camtasia
D: NetSim
Correct Answer:
B. Parallels Desktop 16
Explanation

Parallels Desktop is a virtualization software application for macOS that enables the creation and management of virtual machines (VMs). For a forensics investigator using a Mac, this tool is essential for running other operating systems, such as Windows or Linux, in an isolated environment. This allows the investigator to safely analyze Windows-specific malware, examine artifacts from a Windows system (including Microsoft Office documents), and replicate a target environment for testing purposes without affecting their primary operating system. The software directly facilitates cross-platform analysis and testing, which is a core requirement in digital forensics.

Why Incorrect

A. Riverbed Modeler: This is a network simulation and modeling tool used for network design, planning, and analysis, not for operating system virtualization.
C. Camtasia: This is a software suite for creating video tutorials and presentations via screen recording and video editing; it has no virtualization capabilities.
D. NetSim: This is a network simulation and emulation software used for network research and development, not for running guest operating systems on a host machine.

References

1. Parallels International GmbH. (2023). Parallels Desktop 19 for Mac Features. Parallels Official Website. This official vendor documentation details the software's primary function: "Run thousands of Windows apps like Microsoft Office... on your Mac." This directly supports its use for accessing Windows applications on a Mac via virtualization. (Reference: Parallels Desktop for Mac product page, Features section).

2. University of Illinois Springfield. (2022). CSC 484: Introduction to Digital Forensics Course Syllabus. This syllabus lists "Virtualization (VMWare, VirtualBox)" under the "Topics" section. This establishes the academic principle that virtualization software is a standard and essential tool in the field of digital forensics for creating isolated analysis environments. Parallels Desktop is the equivalent virtualization tool specifically for the macOS platform mentioned in the question. (Reference: Course Syllabus, Topics Section).

3. Ricci, S. (2021). Digital Forensics and Investigations: People, Process, and Technologies to Defend the Enterprise. In Cyber Security And Digital Forensics: An Information Technology Approach (pp. 291-330). Springer, Cham. DOI: https://doi.org/10.1007/978-3-030-70595-210. This academic publication discusses the use of virtual machines as a "forensic workstation" to "prevent cross-contamination and to provide a clean environment for each case" (Section 10.4.1, Forensic Workstation). This validates the use of virtualization technology like Parallels in a professional forensic context.

Scroll to Top