MCFE practice examsIn development
Magnet Certified Forensics Examiner
Multi-source digital forensics with Magnet AXIOM: the standard principles applied across computer, mobile, cloud and memory evidence pulled into one case, each source with its own limits so a logical extraction missing deleted data is understood rather than misread, and AXIOM Process carving and parsing artefacts from hundreds of application formats; then AXIOM Examine analysed through the timeline, connections and map views that fit each question, artefact categories from communication to location, the discipline of verifying a parsed timestamp, attribution or location rather than trusting it, and selective defensible reporting with portable cases.
What you get
Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.
What the exam covers
| Acquisition, evidence sources and AXIOM Process | Not published |
| Analysis, artefacts and reporting | Not published |
Two sample questions
1. Why should a parsed artefact be checked against its source data before it becomes a finding?
- The parser's interpretation can be wrong or incomplete — correct
- The source data is required for the report's appendix
- The artefact cannot be filtered until it is verified
- Verification is what applies the case's time zone
Why: A parser encodes assumptions about a format that may have changed, and the underlying record is the actual evidence.
2. What does AXIOM Process support across formats?
- Parses many app formats — correct
- Only reading a single file type
- Imaging cloud accounts only
- Writing the final report
Why: AXIOM Process parses artefacts from hundreds of application and file formats.
The real MCFE exam
| Length | A written exam and a practical examination |
|---|---|
| Questions | A knowledge exam plus a hands-on AXIOM investigation |
| Pass mark | Set by Magnet for each phase |
| Price | Included with authorised AXIOM training; the exam is taken afterwards |
| Recommended before you sit it | Completion of the Magnet AXIOM training is the intended preparation; none is strictly enforced. |
| Valid for | 2 years, renewed through continuing activity |
Exam facts as published by Magnet Forensics; always check the vendor’s page before you book.
Study MCFE with Chiron
Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.