Exam 5: Processing Crime and Incident Scenes

ISPs can investigate computer abuse committed by their customers.

Match each item with a statement below: -you should rely on this when dealing with a terrorist attack

Match each item with a statement below: -information unrelated to a computing investigation case

Match each item with a statement below: -sets standards for recovering, preserving, and examining digital evidence

The FOIA was originally enacted in the ____.

The most common computer-related crime is ____.

Private-sector organizations include businesses and _________________________ that aren't involved in law enforcement.

Why should companies publish a policy stating their right to inspect computing assets at will?

Environmental and ____ issues are your primary concerns when you're working at the scene to gather information about an incident or a crime.

Some computer cases involve dangerous settings. For these types of investigations, you must rely on the skills of _________________________ teams to recover evidence from the scene.

The reason for the standard practice of securing an incident or crime scene is to expand the area of control beyond the scene's immediate location.

Real-time surveillance requires ____ data transmissions between a suspect's computer and a network server.

If a company does not publish a policy stating that it reserves the right to inspect computing assets at will or display a warning banner, employees have a(n) _________________________.

A(n) ____ should include all the tools you can afford to take to the field.

Law enforcement investigators need a(n) ____ to remove computers from a crime scene and transport them to a lab.

Confidential business data included with the criminal evidence are referred to as ____ data.

Most federal courts have interpreted computer records as ____ evidence.

Certain files, such as the ____ and Security log in Windows XP, might lose essential network activity records if the power is terminated without a proper shutdown.

Match each item with a statement below: -secondhand or indirect evidence, such as an overheard conversation

With a(n) ____ you can arrive at a scene, acquire the data you need, and return to the lab as quickly as possible.