Question 1

You should ask questions about what types of ________ and ________ are involved because you can save time and mistakes if you take the correct equipment with you.

Accepted Answer

hardware,software

Question 2

Match the following terms to their reporting definition.
-Conclusion

Accepted Answer

A) Uses an algorithm to make readable 
B) Needs a word or phrase to unlock the file 
C) Data hides in another file 
D) Usually mail files 
A) Uses an algorithm to make readable 
B) Needs a word or phrase to unlock the file 
C) Data hides in another file 
D) Usually mail files C

Question 3

Training of forensic personnel might include which of the following?

Accepted Answer

A) Psychological profiling 
B) Medical forensics 
C) Ballistics 
D) iPOD data retrieval 
A) Psychological profiling 
B) Medical forensics 
C) Ballistics 
D) iPOD data retrieval D

Question 4

Match the following tools to their uses in the field.
-Sharpie

Accepted Answer

A)  Summarizes the case 
B)  Avoid contaminating evidence with your fingerprints 
C)  Write on CDs without damaging them 
D)  Use to record investigator actions 
E)  Use to acquire data in the field 
A)  Summarizes the case 
B)  Avoid contaminating evidence with your fingerprints 
C)  Write on CDs without damaging them 
D)  Use to record investigator actions 
E)  Use to acquire data in the field

Question 5

Place into correct order the steps when conducting an investigation.
-Fourth

Accepted Answer

A) Transport the evidence to the lab 
B) Tag the evidence 
C) Bag the evidence 
D) Document the evidence 
A) Transport the evidence to the lab 
B) Tag the evidence 
C) Bag the evidence 
D) Document the evidence

Question 6

Match the type of file with the definition:
-Encrypted files

Accepted Answer

A) Uses an algorithm to make readable 
B) Needs a word or phrase to unlock the file 
C) Data hides in another file 
D) Usually mail files 
A) Uses an algorithm to make readable 
B) Needs a word or phrase to unlock the file 
C) Data hides in another file 
D) Usually mail files

Question 7

Match the following terms to their reporting definition.
-Summary

Accepted Answer

A) Uses an algorithm to make readable 
B) Needs a word or phrase to unlock the file 
C) Data hides in another file 
D) Usually mail files 
A) Uses an algorithm to make readable 
B) Needs a word or phrase to unlock the file 
C) Data hides in another file 
D) Usually mail files

Question 8

Forensic investigators establish generally accepted policies and procedures to ensure that

Accepted Answer

A) They can bill at the correct rate 
B) Technical procedures are well documented 
C) All cases will go to trial 
D) Both B and C 
A) They can bill at the correct rate 
B) Technical procedures are well documented 
C) All cases will go to trial 
D) Both B and C

Question 9

Match between columns
                        Premises: Password protected

Accepted Answer

The Answer of Usually mail files and Data hides in is...

Question 10

If you encounter files that have been password protected,one option is to

Accepted Answer

A) Ask the user to give you the password 
B) Reconfigure the BIOS to allow access to the file 
C) Try a number of standard passwords to try to find a match 
D) Consult a hacker site for help with the password 
A) Ask the user to give you the password 
B) Reconfigure the BIOS to allow access to the file 
C) Try a number of standard passwords to try to find a match 
D) Consult a hacker site for help with the password

Question 11

Match the following tasks to the proper level of examination.
-Looking for protected files

Accepted Answer

A) Bottom logical examination layer 
B) Second logical examination layer 
C) Third logical examination layer 
D) Fourth logical examination layer 
A) Bottom logical examination layer 
B) Second logical examination layer 
C) Third logical examination layer 
D) Fourth logical examination layer

Question 12

Match between columns
                        Premises: What am I looking for?

Accepted Answer

The Answer of There may be fingerprints or other trace is...

Question 13

Match the following questions to their considerations.
-What kind of hardware is involved?

Accepted Answer

A) Identify the operating system or network topology 
B) There may be fingerprints or other trace evidence 
C) You would use different tools to locate different items such as photographs or spreadsheets 
D) This determines how you will extract the data 
E) The more skilled the user, the more likely it is that he can alter or destroy evidence 
A) Identify the operating system or network topology 
B) There may be fingerprints or other trace evidence 
C) You would use different tools to locate different items such as photographs or spreadsheets 
D) This determines how you will extract the data 
E) The more skilled the user, the more likely it is that he can alter or destroy evidence

Question 14

Match the type of file with the definition:

-Compressed files

Accepted Answer

A) Uses an algorithm to make readable 
B) Needs a word or phrase to unlock the file 
C) Data hides in another file 
D) Usually mail files 
A) Uses an algorithm to make readable 
B) Needs a word or phrase to unlock the file 
C) Data hides in another file 
D) Usually mail files

Question 15

When should the process of documenting e-evidence begin?

Accepted Answer

A) Upon receipt of the evidence 
B) While gathering evidence 
C) While forensically investigating the evidence 
D) Upon first receiving the call concerning the case 
A) Upon receipt of the evidence 
B) While gathering evidence 
C) While forensically investigating the evidence 
D) Upon first receiving the call concerning the case

Question 16

Which of the following is NOT an item generally included in a forensic kit?

Accepted Answer

A) Flashlight 
B) USB external drive 
C) General case intake form 
D) Latex gloves 
A) Flashlight 
B) USB external drive 
C) General case intake form 
D) Latex gloves

Question 17

Match the following terms to their reporting definition.
-Supplementary materials

Accepted Answer

A) Uses an algorithm to make readable 
B) Needs a word or phrase to unlock the file 
C) Data hides in another file 
D) Usually mail files 
A) Uses an algorithm to make readable 
B) Needs a word or phrase to unlock the file 
C) Data hides in another file 
D) Usually mail files

Question 18

A(n)________ examination involves searches of the areas the operating system does not recognize as being normally used.

Accepted Answer

The answer of A(n)________ examination involves searches of the areas...

Question 19

Which of the following is one of the bottom-layer examinations you would make on a suspect computer?

Accepted Answer

A) Extraction of encrypted files 
B) Operating system norms 
C) Extraction of unallocated space files of interest 
D) All of the above 
A) Extraction of encrypted files 
B) Operating system norms 
C) Extraction of unallocated space files of interest 
D) All of the above

Question 20

Match the following tools to their uses in the field.
-Log book

Accepted Answer

A)  Summarizes the case 
B)  Avoid contaminating evidence with your fingerprints 
C)  Write on CDs without damaging them 
D)  Use to record investigator actions 
E)  Use to acquire data in the field 
A)  Summarizes the case 
B)  Avoid contaminating evidence with your fingerprints 
C)  Write on CDs without damaging them 
D)  Use to record investigator actions 
E)  Use to acquire data in the field

You should ask questions about what types of and are involved because you can save time and mistakes if you take the correct equipment with you.

Match the following terms to their reporting definition. -Conclusion

Training of forensic personnel might include which of the following?

Match the following tools to their uses in the field. -Sharpie

Place into correct order the steps when conducting an investigation. -Fourth

Match the type of file with the definition: -Encrypted files

Match the following terms to their reporting definition. -Summary

Forensic investigators establish generally accepted policies and procedures to ensure that

If you encounter files that have been password protected,one option is to

Match the following tasks to the proper level of examination. -Looking for protected files

Match the following questions to their considerations. -What kind of hardware is involved?

Match the type of file with the definition: -Compressed files

When should the process of documenting e-evidence begin?

Which of the following is NOT an item generally included in a forensic kit?

Match the following terms to their reporting definition. -Supplementary materials

A(n)________ examination involves searches of the areas the operating system does not recognize as being normally used.

Which of the following is one of the bottom-layer examinations you would make on a suspect computer?

Match the following tools to their uses in the field. -Log book

Forensic Evidence and Crime Investigation

Computer Forensics Anddigital Detective Work

Tools, Environments, Equipment, and Certifications

Data, PDA, and Cell Phone Forensics

Operating Systems and Data Transmission Basics for Digital Investigations

Investigating Windows, linux, and Graphic Files

E-Mail and Webmail Forensics

Internet and Network Forensics and Intrusion Detection

Tracking Down Those Who Intend to Do Harm on a Large Scale

Fraud and Forensic Accounting Investigation

Federal Rules and Criminal Codes

Ethical and Professional Responsibility in Testimony

Filters

Exam 4: Policies and Procedures

You should ask questions about what types of ________ and ________ are involved because you can save time and mistakes if you take the correct equipment with you.

Match the following terms to their reporting definition. -Conclusion

Training of forensic personnel might include which of the following?

Match the following tools to their uses in the field. -Sharpie

Place into correct order the steps when conducting an investigation. -Fourth

Match the type of file with the definition: -Encrypted files

Match the following terms to their reporting definition. -Summary

Forensic investigators establish generally accepted policies and procedures to ensure that

If you encounter files that have been password protected,one option is to

Match the following tasks to the proper level of examination. -Looking for protected files

Match the following questions to their considerations. -What kind of hardware is involved?

Match the type of file with the definition: -Compressed files

When should the process of documenting e-evidence begin?

Which of the following is NOT an item generally included in a forensic kit?

Match the following terms to their reporting definition. -Supplementary materials

A(n)________ examination involves searches of the areas the operating system does not recognize as being normally used.

Which of the following is one of the bottom-layer examinations you would make on a suspect computer?

Match the following tools to their uses in the field. -Log book

Forensic Evidence and Crime Investigation

Computer Forensics Anddigital Detective Work

Tools, Environments, Equipment, and Certifications

Data, PDA, and Cell Phone Forensics

Operating Systems and Data Transmission Basics for Digital Investigations

Investigating Windows, linux, and Graphic Files

E-Mail and Webmail Forensics

Internet and Network Forensics and Intrusion Detection

Tracking Down Those Who Intend to Do Harm on a Large Scale

Fraud and Forensic Accounting Investigation

Federal Rules and Criminal Codes

Ethical and Professional Responsibility in Testimony

Filters

You should ask questions about what types of and are involved because you can save time and mistakes if you take the correct equipment with you.