Question 1

Match the following tools to their uses in the field.
-General case intake form

Accepted Answer

A)  Summarizes the case 
B)  Avoid contaminating evidence with your fingerprints 
C)  Write on CDs without damaging them 
D)  Use to record investigator actions 
E)  Use to acquire data in the field 
A)  Summarizes the case 
B)  Avoid contaminating evidence with your fingerprints 
C)  Write on CDs without damaging them 
D)  Use to record investigator actions 
E)  Use to acquire data in the field

Question 2

Match the following tools to their uses in the field.
-Gloves

Accepted Answer

A)  Summarizes the case 
B)  Avoid contaminating evidence with your fingerprints 
C)  Write on CDs without damaging them 
D)  Use to record investigator actions 
E)  Use to acquire data in the field 
A)  Summarizes the case 
B)  Avoid contaminating evidence with your fingerprints 
C)  Write on CDs without damaging them 
D)  Use to record investigator actions 
E)  Use to acquire data in the field

Question 3

Match the following tasks to the proper level of examination.
-Start working with suspect files

Accepted Answer

A) Bottom logical examination layer 
B) Second logical examination layer 
C) Third logical examination layer 
D) Fourth logical examination layer 
A) Bottom logical examination layer 
B) Second logical examination layer 
C) Third logical examination layer 
D) Fourth logical examination layer

Question 4

Why is tagging books and magazines at a crime scene considered important?

Accepted Answer

A) You might wish to subscribe to a few yourself. 
B) It isn't important. 
C) It allows the investigator to get to know how the person thinks. 
D) You might find passwords hidden in the articles. 
A) You might wish to subscribe to a few yourself. 
B) It isn't important. 
C) It allows the investigator to get to know how the person thinks. 
D) You might find passwords hidden in the articles.

Question 5

The ________ of a report contains as much detail and documentation as you can include.

Accepted Answer

The answer of The ________ of a report contains as...

Question 6

The computer's time and date should be compared against a known standard,such as ________.

Accepted Answer

The answer of The computer's time and date should be...

Question 7

Match the following basic tools to their components or uses in the field
-PDA

Accepted Answer

A) Useful for transferring large amounts of data or images 
B) Necessary if there are no convenient plugs 
C) Startup disks, CDs, or USB drives 
D) Used to keep notes or upload photographs 
E) Screwdrivers, pliers, duct tape 
A) Useful for transferring large amounts of data or images 
B) Necessary if there are no convenient plugs 
C) Startup disks, CDs, or USB drives 
D) Used to keep notes or upload photographs 
E) Screwdrivers, pliers, duct tape

Question 8

Match the following tasks to the proper level of examination.
-Looking at "scratch pad" areas

Accepted Answer

A) Bottom logical examination layer 
B) Second logical examination layer 
C) Third logical examination layer 
D) Fourth logical examination layer 
A) Bottom logical examination layer 
B) Second logical examination layer 
C) Third logical examination layer 
D) Fourth logical examination layer

Question 9

Match the following factors to their considerations.
-Equipment resources

Accepted Answer

A) How long will an on-site examination last? 
B) Will the investigation cause financial hardships? 
C) How volatile is the evidence? 
D) Is the equipment impractical? 
E) Is this to be done on-site or in the lab? 
A) How long will an on-site examination last? 
B) Will the investigation cause financial hardships? 
C) How volatile is the evidence? 
D) Is the equipment impractical? 
E) Is this to be done on-site or in the lab?

Question 10

Which of the following would NOT be part of a standard report?

Accepted Answer

A) Brief summary 
B) Body of the report 
C) Brief biography of the suspect 
D) Conclusion section 
A) Brief summary 
B) Body of the report 
C) Brief biography of the suspect 
D) Conclusion section

Question 11

Common criteria for accepting a case include all of the following EXCEPT

Accepted Answer

A) Whether it is a criminal or civil case 
B) The law enforcement agency in charge of the case 
C) The potential impact upon the organization 
D) Liability issues 
A) Whether it is a criminal or civil case 
B) The law enforcement agency in charge of the case 
C) The potential impact upon the organization 
D) Liability issues

Question 12

Match the following factors to their considerations.
-Personnel considerations

Accepted Answer

A) How long will an on-site examination last? 
B) Will the investigation cause financial hardships? 
C) How volatile is the evidence? 
D) Is the equipment impractical? 
E) Is this to be done on-site or in the lab? 
A) How long will an on-site examination last? 
B) Will the investigation cause financial hardships? 
C) How volatile is the evidence? 
D) Is the equipment impractical? 
E) Is this to be done on-site or in the lab?

Question 13

You can use ________ analysis to eliminate common files by comparing them to the same files on your system.

Accepted Answer

The answer of You can use ________ analysis to eliminate...

Question 14

Match the following tasks to the proper level of examination.
-Developing a picture of the system

Accepted Answer

A) Bottom logical examination layer 
B) Second logical examination layer 
C) Third logical examination layer 
D) Fourth logical examination layer 
A) Bottom logical examination layer 
B) Second logical examination layer 
C) Third logical examination layer 
D) Fourth logical examination layer

Question 15

With the original evidence safely stored,you should make a(n)________ of the forensic image.

Accepted Answer

The answer of With the original evidence safely stored,you should...

Question 16

Match the following questions to their considerations.
-What is the skill level of the user?

Accepted Answer

A) Identify the operating system or network topology 
B) There may be fingerprints or other trace evidence 
C) You would use different tools to locate different items such as photographs or spreadsheets 
D) This determines how you will extract the data 
E) The more skilled the user, the more likely it is that he can alter or destroy evidence 
A) Identify the operating system or network topology 
B) There may be fingerprints or other trace evidence 
C) You would use different tools to locate different items such as photographs or spreadsheets 
D) This determines how you will extract the data 
E) The more skilled the user, the more likely it is that he can alter or destroy evidence

Question 17

Place into correct order the steps when conducting an investigation.
-First

Accepted Answer

A) Transport the evidence to the lab 
B) Tag the evidence 
C) Bag the evidence 
D) Document the evidence 
A) Transport the evidence to the lab 
B) Tag the evidence 
C) Bag the evidence 
D) Document the evidence

Question 18

Which of the following is NOT one of the areas to be considered when selecting members of a forensic unit?

Accepted Answer

A) Experience 
B) Team player 
C) Mental agility 
D) Works well under pressure 
A) Experience 
B) Team player 
C) Mental agility 
D) Works well under pressure

Question 19

Your best bet for decrypting a file is to find out what program was used to encrypt it and obtain the ________ for that software.

Accepted Answer

The answer of Your best bet for decrypting a file...

Question 20

The ________ allows police to seize evidence if they see it while lawfully engaged in searching for other evidence.

Accepted Answer

The answer of The ________ allows police to seize evidence...

Match the following tools to their uses in the field. -General case intake form

Match the following tools to their uses in the field. -Gloves

Match the following tasks to the proper level of examination. -Start working with suspect files

Why is tagging books and magazines at a crime scene considered important?

The ________ of a report contains as much detail and documentation as you can include.

The computer's time and date should be compared against a known standard,such as ________.

Match the following basic tools to their components or uses in the field -PDA

Match the following tasks to the proper level of examination. -Looking at "scratch pad" areas

Match the following factors to their considerations. -Equipment resources

Which of the following would NOT be part of a standard report?

Common criteria for accepting a case include all of the following EXCEPT

Match the following factors to their considerations. -Personnel considerations

You can use ________ analysis to eliminate common files by comparing them to the same files on your system.

Match the following tasks to the proper level of examination. -Developing a picture of the system

With the original evidence safely stored,you should make a(n)________ of the forensic image.

Match the following questions to their considerations. -What is the skill level of the user?

Place into correct order the steps when conducting an investigation. -First

Which of the following is NOT one of the areas to be considered when selecting members of a forensic unit?

Your best bet for decrypting a file is to find out what program was used to encrypt it and obtain the ________ for that software.

The ________ allows police to seize evidence if they see it while lawfully engaged in searching for other evidence.

Forensic Evidence and Crime Investigation

Computer Forensics Anddigital Detective Work

Tools, Environments, Equipment, and Certifications

Data, PDA, and Cell Phone Forensics

Operating Systems and Data Transmission Basics for Digital Investigations

Investigating Windows, linux, and Graphic Files

E-Mail and Webmail Forensics

Internet and Network Forensics and Intrusion Detection

Tracking Down Those Who Intend to Do Harm on a Large Scale

Fraud and Forensic Accounting Investigation

Federal Rules and Criminal Codes

Ethical and Professional Responsibility in Testimony

Filters

Exam 4: Policies and Procedures

Match the following tools to their uses in the field. -General case intake form

Match the following tools to their uses in the field. -Gloves

Match the following tasks to the proper level of examination. -Start working with suspect files

Why is tagging books and magazines at a crime scene considered important?

The ________ of a report contains as much detail and documentation as you can include.

The computer's time and date should be compared against a known standard,such as ________.

Match the following basic tools to their components or uses in the field -PDA

Match the following tasks to the proper level of examination. -Looking at "scratch pad" areas

Match the following factors to their considerations. -Equipment resources

Which of the following would NOT be part of a standard report?

Common criteria for accepting a case include all of the following EXCEPT

Match the following factors to their considerations. -Personnel considerations

You can use ________ analysis to eliminate common files by comparing them to the same files on your system.

Match the following tasks to the proper level of examination. -Developing a picture of the system

With the original evidence safely stored,you should make a(n)________ of the forensic image.

Match the following questions to their considerations. -What is the skill level of the user?

Place into correct order the steps when conducting an investigation. -First

Which of the following is NOT one of the areas to be considered when selecting members of a forensic unit?

Your best bet for decrypting a file is to find out what program was used to encrypt it and obtain the ________ for that software.

The ________ allows police to seize evidence if they see it while lawfully engaged in searching for other evidence.

Forensic Evidence and Crime Investigation

Computer Forensics Anddigital Detective Work

Tools, Environments, Equipment, and Certifications

Data, PDA, and Cell Phone Forensics

Operating Systems and Data Transmission Basics for Digital Investigations

Investigating Windows, linux, and Graphic Files

E-Mail and Webmail Forensics

Internet and Network Forensics and Intrusion Detection

Tracking Down Those Who Intend to Do Harm on a Large Scale

Fraud and Forensic Accounting Investigation

Federal Rules and Criminal Codes

Ethical and Professional Responsibility in Testimony

Filters