Module 1 Quiz

Question 1

What do you call a list of people who have had physical possession of the evidence?

Evidence log

Evidence record

Affidavit

Chain of custody

Answer 1

Chain of custody

Question 2

Why should you do a standard risk assessment to prepare for an investigation?

To obtain an affidavit

To discuss the case with the opposing counsel

To obtain a search warrant

To list problems that might happen when conducting an investigation

Answer 2

To list problems that might happen when conducting an investigation

Question 3

The triad of computing security includes which of the following?

Vulnerability/threat assessment and risk management, network intrusion detection and incident response, and digital investigation

Detection, response, and monitoring

Vulnerability assessment, detection, and monitoring

Vulnerability assessment, intrusion response, and monitorin

Answer 3

Vulnerability/threat assessment and risk management, network intrusion detection and incident response, and digital investigation

Question 4

For digital evidence, an evidence bag is typically made of antistatic material.

True

False

Answer 4

True

Question 5

The purpose of maintaining a network of digital forensics specialists is to develop a list of colleagues who specialize in areas different from your own specialties in case you need help on an investigation.

True

False

Answer 5

True

Question 6

You should always prove the allegations made by the person who hired you.

True

False

Answer 6

False

Question 7

What’s the purpose of an affidavit?

To specify who, what, when, and where—that is, specifics on place, time, items being searched for, and so forth

To determine the OS of the suspect computer and list the software needed for the examination

To list problems that might happen when conducting an investigation

To provide facts in support of evidence of a crime to submit to a judge when requesting a search warrant

Answer 7

To provide facts in support of evidence of a crime to submit to a judge when requesting a search warrant

Question 8

Police in the United States must use procedures that adhere to which of the following?

Third Amendment

Fourth Amendment

First Amendment

None of the above

Answer 8

Fourth Amendment

Question 9

You shouldn’t include a narrative of what steps you took in your case report

True

False

Answer 9

False

Question 10

Embezzlement is a type of digital investigation typically conducted in a business environment.

True

False

Answer 10

True

Question 11

Why should evidence media be write-protected?

To make image files smaller in size

To comply with Industry standards

To make sure data isn’t altered

To speed up the imaging process

Answer 11

To make sure data isn’t altered

Question 12

Digital forensics and data recovery refer to the same activities.

True

False

Answer 12

False

Question 13

Under normal circumstances, a private-sector investigator is considered an agent of law enforcement.

True

False

Answer 13

False

Question 14

Data collected before an attorney issues a memo for an attorney-client privilege case is protected under the confidential work product rule.

True

False

Answer 14

False

Question 15

What is one of the necessary components of a search warrant?

Professional codes

Standards of behavior

Professional ethics

Signature of an impartial judicial officer

Answer 15

Signature of an impartial judicial officer

Question 16

Policies can address rules for which of the following?

When you can log on to a company network from home

The Internet sites you can or can’t access

The amount of personal e-mail you can send

Any of the above

Answer 16

Any of the above

Question 17

Why should you critique your case after it’s finished?

To improve your work

To list problems that might happen when conducting an investigation

To maintain chain of custody

To maintain a professional conduct

Answer 17

To improve your work

Question 18

List three items that should be on an evidence custody form.

Name of the investigator, affidavit and name of the judge assigned to the case

Affidavit, search warrant, and description of the evidence

Description of the evidence, location of the evidence and search warrant

Case number, name of the investigator and nature of the case

Answer 18

Case number, name of the investigator and nature of the case

Question 19

Why is professional conduct important?

It saves a company from using warning banners

It helps with an investigation

It includes ethics, morals, and standards of behavior

All of the above

Answer 19

It includes ethics, morals, and standards of behavior

Question 20

One way to determine the resources needed for an investigation is based on the OS of the suspect computer, list the software needed for the examination.

True

False

Answer 20

True

Question 21

A warning banner should never state that the organization has the right to monitor what users do.

True

False

Answer 21

False