Question 1

Which of the following tools can reconstruct TCP streams?

Accepted Answer

A)  Tcpdump 
B)  Wireshark 
C)  Snoop 
D)  EnCase 
A)  Tcpdump 
B)  Wireshark 
C)  Snoop 
D)  EnCase

Question 2

Freenet is not being widely used by criminals to exchange illegal materials because it is too difficult to use.

Accepted Answer

A) True 
 B)False

Question 3

Synchronous chat networks are particularly conducive to criminal activity because of their

Accepted Answer

A)  Privacy 
B)  Immediacy 
C)  Impermanence 
D)  All of the above 
A)  Privacy 
B)  Immediacy 
C)  Impermanence 
D)  All of the above

Question 4

E-mail Received headers can be relied on for tracking purposes because they cannot be forged.

Accepted Answer

A) True 
 B)False

Question 5

Pseudonymous e-mail enables the sender to receive responses to messages whereas anonymous e- mail does not.

Accepted Answer

A) True 
 B)False

Question 6

What characteristics of IRC make it attractive to criminals?

Accepted Answer

A)  IRC enables them to exchange illegal materials with other criminals. 
B)  IRC provides them with some level of anonymity. 
C)  IRC gives them direct, "live" access to a large pool of potential victims. 
D)  All of the above. 
A)  IRC enables them to exchange illegal materials with other criminals. 
B)  IRC provides them with some level of anonymity. 
C)  IRC gives them direct, "live" access to a large pool of potential victims. 
D)  All of the above.

Question 7

When it is not possible to determine the identity of the author of a Usenet message using IP addresses in the header, what else can you do to learn more about the author?

Accepted Answer

A)  Look for unusual signature and use of language 
B)  Search the Web using distinctive aspects of posts 
C)  Look for similar Usenet messages posted using an alias 
D)  All of the above 
A)  Look for unusual signature and use of language 
B)  Search the Web using distinctive aspects of posts 
C)  Look for similar Usenet messages posted using an alias 
D)  All of the above

Question 8

Who is authorized to conduct online undercover investigations when child pornography is involved?

Accepted Answer

A)  Anyone 
B)  Computer security professionals 
C)  Journalists 
D)  Law enforcement 
A)  Anyone 
B)  Computer security professionals 
C)  Journalists 
D)  Law enforcement

Question 9

KaZaa has one feature that can be beneficial from an investigative standpoint - whenever possible, it obtains files from peers in the same geographical region.

Accepted Answer

A) True 
 B)False

Question 10

All web search engines use the same search syntax.

Accepted Answer

A) True 
 B)False

Which of the following tools can reconstruct TCP streams?

Freenet is not being widely used by criminals to exchange illegal materials because it is too difficult to use.

Synchronous chat networks are particularly conducive to criminal activity because of their

E-mail Received headers can be relied on for tracking purposes because they cannot be forged.

Pseudonymous e-mail enables the sender to receive responses to messages whereas anonymous e- mail does not.

What characteristics of IRC make it attractive to criminals?

When it is not possible to determine the identity of the author of a Usenet message using IP addresses in the header, what else can you do to learn more about the author?

Who is authorized to conduct online undercover investigations when child pornography is involved?

KaZaa has one feature that can be beneficial from an investigative standpoint - whenever possible, it obtains files from peers in the same geographical region.

All web search engines use the same search syntax.

Foundations of Digital Forensics

Language of Computer Crime Investigation

Digital Evidence in the Courtroom

Cybercrime Law: a United States Perspective

Cybercrime Law: a European Perspective

Conducting Digital Investigations

Handling a Digital Crime Scene

Investigative Reconstruction With Digital Evidence

Modus Operandi, Motive, and Technology

Violent Crime and Digital Evidence

Digital Evidence As Alibi

Sex Offenders on the Internet

Computer Intrusions

Cyberstalking

Computer Basics for Digital Investigators

Applying Forensic Science to Computers

Digital Evidence on Windows Systems

Digital Evidence on Unix Systems

Digital Evidence on Macintosh Systems

Digital Evidence on Mobile Devices

Network Basics for Digital Investigators

Applying Forensic Science to Networks

Digital Evidence at the Physical and Data-Link Layers

Digital Evidence at the Network and Transport Layers

Filters

Exam 23: Digital Evidence on the Internet

Which of the following tools can reconstruct TCP streams?

Freenet is not being widely used by criminals to exchange illegal materials because it is too difficult to use.

Synchronous chat networks are particularly conducive to criminal activity because of their

E-mail Received headers can be relied on for tracking purposes because they cannot be forged.

Pseudonymous e-mail enables the sender to receive responses to messages whereas anonymous e- mail does not.

What characteristics of IRC make it attractive to criminals?

When it is not possible to determine the identity of the author of a Usenet message using IP addresses in the header, what else can you do to learn more about the author?

Who is authorized to conduct online undercover investigations when child pornography is involved?

KaZaa has one feature that can be beneficial from an investigative standpoint - whenever possible, it obtains files from peers in the same geographical region.

All web search engines use the same search syntax.

Foundations of Digital Forensics

Language of Computer Crime Investigation

Digital Evidence in the Courtroom

Cybercrime Law: a United States Perspective

Cybercrime Law: a European Perspective

Conducting Digital Investigations

Handling a Digital Crime Scene

Investigative Reconstruction With Digital Evidence

Modus Operandi, Motive, and Technology

Violent Crime and Digital Evidence

Digital Evidence As Alibi

Sex Offenders on the Internet

Computer Intrusions

Cyberstalking

Computer Basics for Digital Investigators

Applying Forensic Science to Computers

Digital Evidence on Windows Systems

Digital Evidence on Unix Systems

Digital Evidence on Macintosh Systems

Digital Evidence on Mobile Devices

Network Basics for Digital Investigators

Applying Forensic Science to Networks

Digital Evidence at the Physical and Data-Link Layers

Digital Evidence at the Network and Transport Layers

Filters