Exam 23: Computer Forensics

Tangible objects that prove or disprove fact are what type of evidence?

The _______________ refers to second-hand evidence.

The term _______________ relates to the application of scientific knowledge to legal problems.

Only one person is needed to collect and document evidence obtained in performing forensics on a computer system.

Oral testimony that proves a specific fact is considered real evidence.

Clusters that are marked by the operating system as usable is referred to as which of the following?

Evidence that is convincing or measures up without question is what standard of evidence?

When analyzing computer storage components,the original system should be analyzed.

When taking photographs for use as evidence,what type should be taken?

Minor procedural missteps are not important provided the overall investigation is properly conducted.

Relevant evidence must be convincing or measure up without question.

Evidence offered by the witness that is not based on the personal knowledge of the witness-but is being offered to prove the truth of the matter asserted-falls under the exclusionary rule.

Which of the following rules applies to evidence obtained in violation of the Fourth Amendment of the Constitution?

Oral testimony that proves a specific fact with no inferences or presumptions is what type of evidence?

Evidence offered by a witness that is not based on the personal knowledge of the witness,but is being offered to prove the truth of the matter asserted,fall under which rule of evidence?

_______________ evidence refers to oral testimony that proves a specific fact.

_______________ consists of documents,verbal statements,and material objects that are admissible in a court of law.

What is the primary difference between free space and slack space?

What is the space in a cluster that is not occupied by a file called?

List at least three important considerations when you are transporting evidence from one location to another.