CYB 220 CHAPTER 1 QUIZ WITH
COMPLETE SOLUTIONS
True or False? In most cases, law enforcement may not search a mobile phone without
a warrant if they do not have the owner's consent. - ANSWER-True
True or False? Volatile memory is computer memory that requires power to maintain the
data it holds. - ANSWER-True
True or False? To avoid changing a computer system while examining it, make a
forensic copy and work with that copy. - ANSWER-True
True or False? An expert witness testifies on the basis of scientific or technical
knowledge relevant to a case, rather than on the basis of direct personal experience. -
ANSWER-True
True or False? The underlying operating system of Mac OS is based on Windows. -
ANSWER-False
One must be able to show the whereabouts and custody of evidence, and how it was
handled and stored and by whom, from the time the evidence is first seized by a law
enforcement officer or civilian investigator until the moment it is shown in court. What
standard does this refer to? - ANSWER-Chain of Custody
What term describes information that forensic specialists use to support or interpret real
or documentary evidence? For example, a specialist might demonstrate that a user
stored specific photographs on a desktop. - ANSWER-Testimonial Evidence
True or False? The U.S. Secret Service is the premier federal agency tasked with
combating cybercrime. - ANSWER-True
True or False? The term "expert report" refers to testimony taken from a witness or
party to a case before a trial. - ANSWER-False
True or False? Internet forensics is the study of the source and content of email as
evidence. - ANSWER-False
True or False? Disk forensics refers to the process of examining malicious computer
code. - ANSWER-False
Which of the following is not true of random access memory (RAM)?
A. It retains items in memory for as long as the computer has power supplied to it.
B. It stores programs and data that are currently open.
COMPLETE SOLUTIONS
True or False? In most cases, law enforcement may not search a mobile phone without
a warrant if they do not have the owner's consent. - ANSWER-True
True or False? Volatile memory is computer memory that requires power to maintain the
data it holds. - ANSWER-True
True or False? To avoid changing a computer system while examining it, make a
forensic copy and work with that copy. - ANSWER-True
True or False? An expert witness testifies on the basis of scientific or technical
knowledge relevant to a case, rather than on the basis of direct personal experience. -
ANSWER-True
True or False? The underlying operating system of Mac OS is based on Windows. -
ANSWER-False
One must be able to show the whereabouts and custody of evidence, and how it was
handled and stored and by whom, from the time the evidence is first seized by a law
enforcement officer or civilian investigator until the moment it is shown in court. What
standard does this refer to? - ANSWER-Chain of Custody
What term describes information that forensic specialists use to support or interpret real
or documentary evidence? For example, a specialist might demonstrate that a user
stored specific photographs on a desktop. - ANSWER-Testimonial Evidence
True or False? The U.S. Secret Service is the premier federal agency tasked with
combating cybercrime. - ANSWER-True
True or False? The term "expert report" refers to testimony taken from a witness or
party to a case before a trial. - ANSWER-False
True or False? Internet forensics is the study of the source and content of email as
evidence. - ANSWER-False
True or False? Disk forensics refers to the process of examining malicious computer
code. - ANSWER-False
Which of the following is not true of random access memory (RAM)?
A. It retains items in memory for as long as the computer has power supplied to it.
B. It stores programs and data that are currently open.
