Computer Forensics UPDATED ACTUAL
Questions and CORRECT Answers
Policies can address rules for which of the following?
A. When you can log on to a company network from
home
B. The amount of personal e-mail you can send
C. The Internet sites you can or can't access
D. Any of the above - CORRECT ANSWER - D
Why should you do a standard risk assessment to prepare for an investigation?
A. To obtain a search warrant
B. To list problems that might happen when conducting
an investigation
C. To obtain an affidavit
D. To discuss the case with the opposing counsel - CORRECT ANSWER - B
Why should evidence media be write-protected?
A. To speed up the imaging process
B. To make sure data isn't altered
,C. To make image files smaller in size
D. To comply with Industry standards - CORRECT ANSWER - B.
What is one of the necessary components of a search warrant?
A. Professional ethics
B. Professional codes
C. Standards of behavior
D. Signature of an impartial judicial
officer - CORRECT ANSWER - D
Why is professional conduct important?
A. It includes ethics, morals, and
standards of behavior
B. It helps with an investigation
C. It saves a company from using
warning banners
D. All of the above - CORRECT ANSWER - A
For digital evidence, an evidence bag is typically made of antistatic material.
, True
False - CORRECT ANSWER - T
One way to determine the resources needed for an investigation is based on the OS of the suspect
computer, list the software needed for the examination.
True
False - CORRECT ANSWER - T
Digital forensics and data recovery refer to the same activities.
True
False - CORRECT ANSWER - F
What's the purpose of an affidavit?
A. To specify who, what, when, and where—that is, specifics on place, time, items being
searched for, and so forth
B. To list problems that might happen when conducting an investigation
C. To provide facts in support of evidence of a crime to submit to a judge when requesting a
search warrant
D. To determine the OS of the suspect computer and list the software needed for the examination
- CORRECT ANSWER - C
List three items that should be on an evidence custody form.
A. Case number, name of the investigator and nature of the case
Questions and CORRECT Answers
Policies can address rules for which of the following?
A. When you can log on to a company network from
home
B. The amount of personal e-mail you can send
C. The Internet sites you can or can't access
D. Any of the above - CORRECT ANSWER - D
Why should you do a standard risk assessment to prepare for an investigation?
A. To obtain a search warrant
B. To list problems that might happen when conducting
an investigation
C. To obtain an affidavit
D. To discuss the case with the opposing counsel - CORRECT ANSWER - B
Why should evidence media be write-protected?
A. To speed up the imaging process
B. To make sure data isn't altered
,C. To make image files smaller in size
D. To comply with Industry standards - CORRECT ANSWER - B.
What is one of the necessary components of a search warrant?
A. Professional ethics
B. Professional codes
C. Standards of behavior
D. Signature of an impartial judicial
officer - CORRECT ANSWER - D
Why is professional conduct important?
A. It includes ethics, morals, and
standards of behavior
B. It helps with an investigation
C. It saves a company from using
warning banners
D. All of the above - CORRECT ANSWER - A
For digital evidence, an evidence bag is typically made of antistatic material.
, True
False - CORRECT ANSWER - T
One way to determine the resources needed for an investigation is based on the OS of the suspect
computer, list the software needed for the examination.
True
False - CORRECT ANSWER - T
Digital forensics and data recovery refer to the same activities.
True
False - CORRECT ANSWER - F
What's the purpose of an affidavit?
A. To specify who, what, when, and where—that is, specifics on place, time, items being
searched for, and so forth
B. To list problems that might happen when conducting an investigation
C. To provide facts in support of evidence of a crime to submit to a judge when requesting a
search warrant
D. To determine the OS of the suspect computer and list the software needed for the examination
- CORRECT ANSWER - C
List three items that should be on an evidence custody form.
A. Case number, name of the investigator and nature of the case
