Exam 19: Computer Forensics

The primary form of data storage within a personal computer is:

Which type of data are readily available to a computer user?

What aspects of a computer should be photographed close-up at an electronic crime scene?

The ________ is the main chip within the computer.

The call history for a mobile device is generally not able to be used in an investigation.

One should not look for "latent" data in:

Which of the following is NOT considered a hardware device?

Before an OS can be formatted, it must write to a HDD.

What are the three areas in which an investigator can find visible data on a computer?

________ space is a file or defined space on the HDD to which data is written to free RAM for applications that are in use.

What is hacking? Who most commonly engages in hacking, and for what purpose?

The first thing a crime scene investigator should do when encountering computer forensic evidence is:

Match the word in Column 1 to its definition in Column 2. Each answer can only be used once. A)A set of instructions compiled into a program that performs a particular task B)A group of sectors in multiples of two; typically the minimum space allocated to a file C)A standard method by which Internet sites are addressed D)All data that the operating system is presently aware of, and thus is readily accessible to the user E)Files placed on a computer from a visited website that are used to track visits and usage of that site F)Hardware or software designed to protect against intrusions into a computer network G)Typically the main storage location within the computer, consisting of magnetic platters contained in a case H)The smallest unit of data addressable by a hard disk drive, generally consisting of 512 bytes I)The main chip within the computer, also referred to as the brain of the computer. This microprocessor chip handles most of the operations (code and instructions)of the computer. J)Portions of visited Web pages placed on the local hard disk drive to facilitate quicker retrieval once revisited K)The main system board of a computer (and many other electronic devices)that delivers power, data, and instructions to the computer's components L)Areas of files and disks that are typically not apparent to the computer user (and often not to the operating system), but contain data nonetheless -Central processing unit (CPU)

The boot (start-up)process for a computer is controlled by:

A(n)________ address is a unique address given to every computer connected to the Internet.

Evidentiary data may be recovered from which of the following?

A cluster is the smallest unit of data that a hard drive can address.

Visible data exists in areas of the drive that are, generally speaking, unknown and inaccessible to most end users.

One should not search for "visible" data in:

Unauthorized intrusion into a computer is called: