CHFI_CH2

Question 1

Incident Responder

Answer 1

Responsible for all measures taken when an incident occurs, secures the incident area and collects evidence that is present at the crime scene, disconnects systems to stop spread of incident to other systems.

Question 2

Incident Analyzer

Answer 2

Analyzes incidents based on the occurrence, examines incident to determine what type of incident, how it affects systems, different threats and vulnerabilities associated with the crime.

Question 3

Evidence Examiner/Investigator

Answer 3

Examines evidence acquired and sorts it based on usefulness and relevance into a hierarchy that indicates priority of evidence.

Question 4

Evidence Documenter

Answer 4

Documents all evidence and the phases present in investigation process, gather information from people involved in the forensic process documenting in an orderly fashion from incident occurrence to the end of the investigation.

Question 5

Evidence Manager

Answer 5

Manages the evidence, have all the information about the evidence, including evidence name, type, time and source of evidence.

Question 6

Expert Witness

Answer 6

Offers a formal opinion as a testimony in a court of law, help to authenticate the facts and other witnesses in complex cases.

Question 7

Attorney

Answer 7

Gives legal advice about how to conduct the investigation and address the legal issues involved in the investigation.

Question 8

First Response in Six Stages

Answer 8

1. Document crime scene
2. Collecting incident information
3. Planning for search and seizure
4. Identifying and collecting electronic evidence
5. Packaging electronic evidence
6. Transporting electronic evidence