Chapter 19

Question 1

_______ may result in charging
suspects with a crime and the prosecution of those charges in criminal court.

Operational Investigations
Criminal Investigations
Civil Investigations
Regulatory Investigations

Answer 1

Criminal Investigations

Question 2

______ when they believe that an
individual or corporation has violated administrative law.

Operational Investigations
Criminal Investigations
Civil Investigations
Regulatory Investigations

Answer 2

Regulatory Investigations

Question 3

_______ simply requires that the evidence demonstrate that the outcome of the case is more likely
than not.

Operational Investigations
Criminal Investigations
Civil Investigations
Regulatory Investigations

Answer 3

Civil Investigations

Question 4

_______ have the loosest standards for collection of information.

Answer 4

Operational Investigations

Question 5

three of these requirements for evidence to be admissible:

Answer 5

1. The evidence must be relevant to determining a fact.
2. The fact that the evidence seeks to determine must be material (that is, related) to the case.
3. The evidence must be competent, meaning it must have been obtained legally. Evidence that results from an illegal search would be inadmissible because it is not
   competent.

Question 6

when a document is used as evidence in a court proceeding, the original document must be introduced is :

best evidence rule
parol evidence rule

Answer 6

best evidence rule

Question 7

when an agreement between parties is put into written form, the written document is assumed to contain all the terms of the agreement and no verbal agreements may modify the written agreement.

best evidence rule
parol evidence rule

Answer 7

parol evidence rule

Question 8

Consists of things that may actually be brought into a court of law.

real evidence
documentary evidence
testimonial evidence

Answer 8

real evidence

Question 9

This type of evidence must also be authenticated.

real evidence
documentary evidence
testimonial evidence

Answer 9

documentary evidence

Question 10

______ must meet the materiality, competency, and relevancy requirements
and also complies with the best evidence and parol evidence rules, it can be admitted into court.

real evidence
documentary evidence
testimonial evidence

Answer 10

documentary evidence

Question 11

______ of most witnesses must be strictly limited to direct evidence based on the witness’s factual observations.

real evidence
documentary evidence
testimonial evidence

Answer 11

testimonial evidence

Question 12

the ______ process facilitates the processing of electronic information for disclosure.

Answer 12

electronic discovery

or eDiscovery

Question 13

has a negative outcome affecting the confidentiality, integrity, or availability of an organization’s data

Event
Incident

Answer 13

Incident

Question 14

Any occurrence that takes place during a certain period of time

Event
Incident

Answer 14

Event

Question 15

The most common reason incidents are not reported is that they _____.

Answer 15

are never identified

Question 16

_______ attacks are reconnaissance attacks that usually precede another, more serious attack.

Scanning
Compromises
Malicious code
Denial of service

Answer 16

Scanning

Question 17

_____ is any unauthorized access to the system or information the system
stores.

Scanning
Compromises
Malicious code
Denial of service

Answer 17

Compromises

Question 18

A user or automated tool reports that one or more services (or the entire
machine) are unavailable

Answer 18

Denial of Service