Question 1

Unauthorized intrusion into a computer is called:

Accepted Answer

A)  Crashing. 
B)  Whacking. 
C)  Hacking. 
D)  Spamming. 
A)  Crashing. 
B)  Whacking. 
C)  Hacking. 
D)  Spamming.

Question 2

What type of memory stores software programs and instructions while the computer is turned on?
 What special considerations must be taken to preserve this type of memory on a computer at a crime scene?

Accepted Answer

Answer (should include points such as):

Question 3

Mobile devices are often shut off to avoid the loss of data.

Accepted Answer

A) True 
 B)False

Question 4

Evidentiary data may be recovered from which of the following?

Accepted Answer

A)  Slack space on the HDD 
B)  Unallocated space on the HDD 
C)  RAM swap files 
D)  All of the above 
A)  Slack space on the HDD 
B)  Unallocated space on the HDD 
C)  RAM swap files 
D)  All of the above

Question 5

Sectors are typically how many bytes in size?

Accepted Answer

A)  126 bytes 
B)  256 bytes 
C)  512 bytes 
D)  1024 bytes 
A)  126 bytes 
B)  256 bytes 
C)  512 bytes 
D)  1024 bytes

Question 6

The primary form of data storage within a personal computer is:

Accepted Answer

A)  The CD-ROM. 
B)  The hard disk drive. 
C)  A zip drive. 
D)  The recycle bin. 
A)  The CD-ROM. 
B)  The hard disk drive. 
C)  A zip drive. 
D)  The recycle bin.

Question 7

Visible data exists in areas of the drive that are,generally speaking,unknown and inaccessible to most end users.

Accepted Answer

A) True 
 B)False

Question 8

A motherboard:

Accepted Answer

A)  Is the main circuit board within a computer. 
B)  Has a socket to accept RAM. 
C)  Connects to every device used by the system. 
D)  All of the above 
A)  Is the main circuit board within a computer. 
B)  Has a socket to accept RAM. 
C)  Connects to every device used by the system. 
D)  All of the above

Question 9

The boot (start-up)process for a computer is controlled by:

Accepted Answer

A)  The hard disk drive. 
B)  ROM. 
C)  RAM. 
D)  USB thumb drives. 
A)  The hard disk drive. 
B)  ROM. 
C)  RAM. 
D)  USB thumb drives.

Question 10

Name two situations in which an investigator would not immediately unplug a computer at an electronic crime scene.

Accepted Answer

Answer (should include points such as):

Question 11

The primary storage device on most computers is the hard disk drive (HDD).

Accepted Answer

A) True 
 B)False

Question 12

What aspects of a computer should be photographed close-up at an electronic crime scene?

Accepted Answer

Answer (should include points such as):

Question 13

A software algorithm used to create a "fingerprint" of a file or an entire HDD is called:

Accepted Answer

A)  MD5. 
B)  ROM. 
C)  RAM. 
D)  MAC OS. 
A)  MD5. 
B)  ROM. 
C)  RAM. 
D)  MAC OS.

Question 14

One of the most common places to begin to look for evidential data is in:

Accepted Answer

A)  The spreadsheet files. 
B)  A photograph editing program. 
C)  A CAD package. 
D)  The word processing or text-based document files. 
A)  The spreadsheet files. 
B)  A photograph editing program. 
C)  A CAD package. 
D)  The word processing or text-based document files.

Question 15

Often mobile devices contain the same Internet artifacts as a computer,such as cookies and browser history.

Accepted Answer

A) True 
 B)False

Question 16

Most web browsers use a(n)________ to expedite and streamline browsing.

Accepted Answer

A)  Area network 
B)  Cable modem 
C)  Domain 
D)  Caching system 
A)  Area network 
B)  Cable modem 
C)  Domain 
D)  Caching system

Question 17

A(n)________ address is a unique address given to every computer connected to the Internet.

Accepted Answer

The answer of A(n)________ address is a unique address given...

Question 18

The central processing unit,or CPU,is the part of the computer that actually computes.

Accepted Answer

A) True 
 B)False

Question 19

The travel history of a suspect can be documented using ________ and map data from a mobile device.

Accepted Answer

The answer of The travel history of a suspect can...

Question 20

What keeps track of the location of files and folders on the HDD?

Accepted Answer

A)  The search engine 
B)  The HDD itself 
C)  The CPU 
D)  The FAT 
A)  The search engine 
B)  The HDD itself 
C)  The CPU 
D)  The FAT

Unauthorized intrusion into a computer is called:

What type of memory stores software programs and instructions while the computer is turned on? What special considerations must be taken to preserve this type of memory on a computer at a crime scene?

Mobile devices are often shut off to avoid the loss of data.

Evidentiary data may be recovered from which of the following?

Sectors are typically how many bytes in size?

The primary form of data storage within a personal computer is:

Visible data exists in areas of the drive that are,generally speaking,unknown and inaccessible to most end users.

A motherboard:

The boot (start-up)process for a computer is controlled by:

Name two situations in which an investigator would not immediately unplug a computer at an electronic crime scene.

The primary storage device on most computers is the hard disk drive (HDD).

What aspects of a computer should be photographed close-up at an electronic crime scene?

A software algorithm used to create a "fingerprint" of a file or an entire HDD is called:

One of the most common places to begin to look for evidential data is in:

Often mobile devices contain the same Internet artifacts as a computer,such as cookies and browser history.

Most web browsers use a(n)________ to expedite and streamline browsing.

A(n)________ address is a unique address given to every computer connected to the Internet.

The central processing unit,or CPU,is the part of the computer that actually computes.

The travel history of a suspect can be documented using ________ and map data from a mobile device.

What keeps track of the location of files and folders on the HDD?

Introduction

The Crime Scene

Physical Evidence

Crime Scene Reconstruction: Blood Stain Pattern Analysis

Death Investigation

Fingerprints

Forensic Biometrics

The Microscope

Firearms, tool Marks, and Other Impressions

Matter, light, and Glass Examination

Hairs and Fibers

Drugs

Forensic Toxicology

Metals, paint, and Soil

Forensic Serology

DNA: the Indispensable Forensic Science Tool

Forensic Aspects of Fire and Explosion Investigation

Document Examination

Mobile Device Forensics

Filters

Exam 19: Computer Forensics

Unauthorized intrusion into a computer is called:

What type of memory stores software programs and instructions while the computer is turned on? What special considerations must be taken to preserve this type of memory on a computer at a crime scene?

Mobile devices are often shut off to avoid the loss of data.

Evidentiary data may be recovered from which of the following?

Sectors are typically how many bytes in size?

The primary form of data storage within a personal computer is:

Visible data exists in areas of the drive that are,generally speaking,unknown and inaccessible to most end users.

A motherboard:

The boot (start-up)process for a computer is controlled by:

Name two situations in which an investigator would not immediately unplug a computer at an electronic crime scene.

The primary storage device on most computers is the hard disk drive (HDD).

What aspects of a computer should be photographed close-up at an electronic crime scene?

A software algorithm used to create a "fingerprint" of a file or an entire HDD is called:

One of the most common places to begin to look for evidential data is in:

Often mobile devices contain the same Internet artifacts as a computer,such as cookies and browser history.

Most web browsers use a(n)________ to expedite and streamline browsing.

A(n)________ address is a unique address given to every computer connected to the Internet.

The central processing unit,or CPU,is the part of the computer that actually computes.

The travel history of a suspect can be documented using ________ and map data from a mobile device.

What keeps track of the location of files and folders on the HDD?

Introduction

The Crime Scene

Physical Evidence

Crime Scene Reconstruction: Blood Stain Pattern Analysis

Death Investigation

Fingerprints

Forensic Biometrics

The Microscope

Firearms, tool Marks, and Other Impressions

Matter, light, and Glass Examination

Hairs and Fibers

Drugs

Forensic Toxicology

Metals, paint, and Soil

Forensic Serology

DNA: the Indispensable Forensic Science Tool

Forensic Aspects of Fire and Explosion Investigation

Document Examination

Mobile Device Forensics

Filters