Chapter 2 - The Forensics Lab

Question 1

ANSI-ASQ National Accreditation Board (ANAB)

Answer 1

An organization that accredits testing and calibration laboratories, inspection bodies, and other certification organizations.
Example: ANAB accredited a digital forensics lab to ensure its adherence to industry standards and best practices.

Question 2

business case

Answer 2

A document that outlines the justification, costs, benefits, and risks of a proposed project or initiative.
Example: A business case for implementing a new digital forensics lab would include a cost-benefit analysis and an assessment of the potential return on investment.

Answer 3

Certified Computer Examiner (CCE):

Definition: A certification for professionals in the digital forensics field, demonstrating knowledge and skills in computer forensics analysis and investigation.
Example: A digital forensics investigator obtaining a CCE certification to demonstrate their expertise in the field.

Question 4

Certified Cyber Forensics Professional (CCFP)

Answer 4

A certification for professionals in the digital forensics field, demonstrating knowledge and skills in cyber forensics analysis and investigation.
Example: A digital forensics investigator obtaining a CCFP certification to demonstrate their expertise in investigating cybercrime.

Question 5

Certified Forensic Computer Examiner (CFCE)

Answer 5

A certification for professionals in the digital forensics field, demonstrating knowledge and skills in computer forensics analysis and investigation.
Example: A digital forensics investigator obtaining a CFCE certification to demonstrate their expertise in the field.

Question 6

configuration management

Answer 6

The process of tracking and controlling changes to a system or environment, typically used in software development or IT management.
Example: A company implementing configuration management procedures to ensure consistency and reliability in its IT infrastructure.

Question 7

digital forensics lab

Answer 7

A specialized facility for conducting digital forensics investigations, typically equipped with specialized hardware and software tools for analyzing digital evidence.
Example: A police department setting up a digital forensics lab to investigate crimes involving digital devices and media.

Question 8

High Tech Crime Network (HTCN)

Answer 8

An international network of digital forensics and cybercrime investigators and professionals.
Example: A digital forensics investigator joining HTCN to collaborate and share knowledge with other professionals in the field.

Question 9

risk management

Answer 9

The process of identifying, assessing, and prioritizing potential risks and developing strategies to manage and mitigate those risks.
Example: A company conducting a risk management assessment to identify potential cybersecurity threats and develop a plan to mitigate those risks.

Question 10

secure facility

Answer 10

A facility designed to provide physical security for sensitive or confidential information or materials.
Example: A government agency building a secure facility to store classified documents and information.

Question 11

TEMPEST

Answer 11

A set of technical standards for preventing electronic eavesdropping and the interception of electromagnetic signals.
Example: A company implementing TEMPEST standards to protect sensitive information from electronic eavesdropping and interception.

Question 12

Uniform Crime Report

Answer 12

An annual report published by the FBI containing statistics on crime reported to law enforcement agencies in the United States.
Example: The FBI releasing the Uniform Crime Report to provide data and insight into crime trends and statistics in the United States.

Question 13

An employer can be held liable for e-mail harassment. True or False?

Answer 13

True

Question 14

Building a business case can involve which of the following?

Answer 14

Protecting Trade Secrets

Question 15

The ANAB mandates the procedures established for a digital forensics lab. True or False?

Answer 15

False

Question 16

The manager of a digital forensics lab is responsible for which of the following? (Choose all that apply.) -

Answer 16

1. Making necessary changes in lab procedures and software, 2. Ensuring that staff members have enough training to do the job, 3. Knowing the lab objectives

Question 17

To determine the types of operating systems needed in your lab, list two sources of information you could use. -

Answer 17

Operating system vendor websites, technical manuals

Question 18

What items should your business plan include?

Answer 18

Justification for the project, Costs, Benefits, Risks

Question 19

List two popular certification programs for digital forensics.

Answer 19

• Certified Computer Examiner (CCE), Certified Forensic Computer Examiner (CFCE)

Question 20

Why is physical security so critical for digital forensics labs?

Answer 20

To protect sensitive and confidential information from unauthorized access or theft.

Question 21

If a visitor to your digital forensics lab is a personal friend, it’s not necessary to have him or her sign the visitor’s log. True or False?

Answer 21

False

Question 22

What three items should you research before enlisting in a certification program?

Answer 22

Requirements for certification, Cost of certification, Validity of certification

Question 23

Large digital forensics labs should have at least

Answer 23

2 exits

Question 24

Typically, a(n) digital forensics lab has a

Answer 24

separate storage area or room for evidence.

Question 25

Digital forensics facilities always have windows. True or False?

Answer 25

False

Question 26

Evidence storage containers should have several master keys. True or False?

Answer 26

False

Question 27

A forensic workstation should always have a direct broadband connection to the Internet. True or False?

Answer 27

False

Question 28

Which organization provides good information on safe storage containers?

Answer 28

National Institute of Standards and Technology (NIST)

Question 29

Which organization has guidelines on how to operate a digital forensics lab?

Answer 29

High Tech Crime Network (HTCN)

Question 30

What term refers to labs constructed to shield EMR emissions?

Answer 30

TEMPEST