Question 1

​What does FRE stand for?

Accepted Answer

A) ​Federal Rules of Evidence 
B) ​Federal Regulations for Evidence 
C) Federal Rights for Everyone 
D) Federal Rules for Equipment 
A) ​Federal Rules of Evidence 
B) ​Federal Regulations for Evidence 
C) Federal Rights for Everyone 
D) Federal Rules for Equipment

Question 2

​The ____________________ doesn't extend to supporting a general exploratory search from one object to another unless something incriminating is found.

Accepted Answer

plain view

Question 3

Match the terms with the correct definitions?.
-The standard specifying whether a police officer has the right to make an arrest, conduct a personal or property search, or obtain a warrant for arrest

Accepted Answer

A) ?Computer-generated records 
B) Keyed hash set? 
C) ?Cyclic Redundancy Check 
D) ?Message Digest 5 
E) ?Computer-stored records
F)?Probable cause
G)?Extensive-response field kit
H)Sniffing
I)?Nonkeyed hash set
J)Initial-response field kit 
A) ?Computer-generated records 
B) Keyed hash set? 
C) ?Cyclic Redundancy Check 
D) ?Message Digest 5 
E) ?Computer-stored records
F)?Probable cause
G)?Extensive-response field kit
H)Sniffing
I)?Nonkeyed hash set
J)Initial-response field kit

Question 4

Which of the following is not done when preparing for a case?​

Accepted Answer

A) ​Describe the nature of the case. 
B) ​Identify the type of OS. 
C) Set up covert surveillance. 
D) Determine whether you can seize the computer or digital device. 
A) ​Describe the nature of the case. 
B) ​Identify the type of OS. 
C) Set up covert surveillance. 
D) Determine whether you can seize the computer or digital device.

Question 5

At a scene, technical advisors can help direct other investigators to collect evidence correctly. List the responsibilities of technical advisors.

Accepted Answer

The following are responsibilities of te

Question 6

An emergency situation under the PATRIOT Act is defined as the immediate risk of death or personal ​injury, such as finding a bomb threat in an e-mail.

Accepted Answer

A) True 
 B)False

Question 7

To investigate employees suspected of improper use of company digital assets, a company policy statement about misuse of digital assets allows corporate investigators to conduct covert surveillance with little or no cause, and access company computer systems and digital devices without a warrant.​

Accepted Answer

A) True 
 B)False

Question 8

What should you do while copying data on a suspect's computer that is still live?​

Accepted Answer

A) ​Open files to view contents. 
B) ​Make notes regarding everything you do. 
C) Conduct a Google search of unknown extensions using the computer. 
D) Check Facebook for additional suspects. 
A) ​Open files to view contents. 
B) ​Make notes regarding everything you do. 
C) Conduct a Google search of unknown extensions using the computer. 
D) Check Facebook for additional suspects.

Question 9

A _______ is not ​a private sector organization.

Accepted Answer

A) ​small to medium business 
B) ​large corporation 
C) non-government organization 
D) hospital 
A) ​small to medium business 
B) ​large corporation 
C) non-government organization 
D) hospital

Question 10

To verify data integrity, different methods of obtaining a unique identity for file data have been developed. Explain how you can use Cyclic Redundancy Check (CRC) and Message Digest 5 (MD5)​​ for this purpose.

Accepted Answer

Both Cyclic Redundancy Check (CRC) and M

Question 11

The term _______ describes rooms filled with extremely large disk systems that are typically used by large business data centers.

Accepted Answer

A) ​storage room 
B) ​server farm 
C) data well 
D) storage hub 
A) ​storage room 
B) ​server farm 
C) data well 
D) storage hub

Question 12

Match the terms with the correct definitions?.
-?An algorithm that produces a hexadecimal value of a file or storage media; used to determine whether data has changed

Accepted Answer

A) ?Computer-generated records 
B) Keyed hash set? 
C) ?Cyclic Redundancy Check 
D) ?Message Digest 5 
E) ?Computer-stored records
F)?Probable cause
G)?Extensive-response field kit
H)Sniffing
I)?Nonkeyed hash set
J)Initial-response field kit 
A) ?Computer-generated records 
B) Keyed hash set? 
C) ?Cyclic Redundancy Check 
D) ?Message Digest 5 
E) ?Computer-stored records
F)?Probable cause
G)?Extensive-response field kit
H)Sniffing
I)?Nonkeyed hash set
J)Initial-response field kit

Question 13

_______ does not recover data in free or slack space.

Accepted Answer

A) Raw format acquisition 
B) ​Live acquisition 
C) Static acquisition 
D) Sparse acquisition 
A) Raw format acquisition 
B) ​Live acquisition 
C) Static acquisition 
D) Sparse acquisition

Question 14

​
________________ can be any information stored or transmitted in digital form.​

Accepted Answer

The answer of ​
________________ can be any information stored or...

Question 15

After you record the scene and shut down the system, you bag and tag the evidence. Describe the steps to follow for bagging and tagging evidence.?

Accepted Answer

The following steps are to be followed w

Question 16

Consistent practices help verify your work and enhance your credibility, so you must handle all evidence consistently. Explain why it's important to apply the same security and accountability controls for evidence in a civil lawsuit as in a major crime.

Accepted Answer

Apply the same security and accountabili

Question 17

Match the terms with the correct definitions?.
-A mathematic algorithm that translates a file into a unique hexadecimal value

Accepted Answer

A) ?Computer-generated records 
B) Keyed hash set? 
C) ?Cyclic Redundancy Check 
D) ?Message Digest 5 
E) ?Computer-stored records
F)?Probable cause
G)?Extensive-response field kit
H)Sniffing
I)?Nonkeyed hash set
J)Initial-response field kit 
A) ?Computer-generated records 
B) Keyed hash set? 
C) ?Cyclic Redundancy Check 
D) ?Message Digest 5 
E) ?Computer-stored records
F)?Probable cause
G)?Extensive-response field kit
H)Sniffing
I)?Nonkeyed hash set
J)Initial-response field kit

Question 18

Match the terms with the correct definitions?.
-?A portable kit designed to process several computers and a variety of operating systems at a crime or incident scene involving computers

Accepted Answer

A) ?Computer-generated records 
B) Keyed hash set? 
C) ?Cyclic Redundancy Check 
D) ?Message Digest 5 
E) ?Computer-stored records
F)?Probable cause
G)?Extensive-response field kit
H)Sniffing
I)?Nonkeyed hash set
J)Initial-response field kit 
A) ?Computer-generated records 
B) Keyed hash set? 
C) ?Cyclic Redundancy Check 
D) ?Message Digest 5 
E) ?Computer-stored records
F)?Probable cause
G)?Extensive-response field kit
H)Sniffing
I)?Nonkeyed hash set
J)Initial-response field kit

Question 19

Match the terms with the correct definitions?.
-Detecting data transmissions to and from a suspect's computer? and a network server to determine the type of data being transmitted over a network

Accepted Answer

A) ?Computer-generated records 
B) Keyed hash set? 
C) ?Cyclic Redundancy Check 
D) ?Message Digest 5 
E) ?Computer-stored records
F)?Probable cause
G)?Extensive-response field kit
H)Sniffing
I)?Nonkeyed hash set
J)Initial-response field kit 
A) ?Computer-generated records 
B) Keyed hash set? 
C) ?Cyclic Redundancy Check 
D) ?Message Digest 5 
E) ?Computer-stored records
F)?Probable cause
G)?Extensive-response field kit
H)Sniffing
I)?Nonkeyed hash set
J)Initial-response field kit

Question 20

The Fourth Amendment states that only warrants "particularly describing the place to be searched and the persons ​or things to be seized" can be issued. The courts have determined that this phrase means a warrant can authorize a search of a specific place for ​anything.​

Accepted Answer

A) True 
 B)False

What does FRE stand for?

The ____________________ doesn't extend to supporting a general exploratory search from one object to another unless something incriminating is found.

Match the terms with the correct definitions?. -The standard specifying whether a police officer has the right to make an arrest, conduct a personal or property search, or obtain a warrant for arrest

Which of the following is not done when preparing for a case?

At a scene, technical advisors can help direct other investigators to collect evidence correctly. List the responsibilities of technical advisors.

An emergency situation under the PATRIOT Act is defined as the immediate risk of death or personal injury, such as finding a bomb threat in an e-mail.

To investigate employees suspected of improper use of company digital assets, a company policy statement about misuse of digital assets allows corporate investigators to conduct covert surveillance with little or no cause, and access company computer systems and digital devices without a warrant.

What should you do while copying data on a suspect's computer that is still live?

A _______ is not a private sector organization.

To verify data integrity, different methods of obtaining a unique identity for file data have been developed. Explain how you can use Cyclic Redundancy Check (CRC) and Message Digest 5 (MD5) for this purpose.

The term _______ describes rooms filled with extremely large disk systems that are typically used by large business data centers.

Match the terms with the correct definitions?. -?An algorithm that produces a hexadecimal value of a file or storage media; used to determine whether data has changed

_______ does not recover data in free or slack space.

________________ can be any information stored or transmitted in digital form.

After you record the scene and shut down the system, you bag and tag the evidence. Describe the steps to follow for bagging and tagging evidence.?

Consistent practices help verify your work and enhance your credibility, so you must handle all evidence consistently. Explain why it's important to apply the same security and accountability controls for evidence in a civil lawsuit as in a major crime.

Match the terms with the correct definitions?. -A mathematic algorithm that translates a file into a unique hexadecimal value

Match the terms with the correct definitions?. -?A portable kit designed to process several computers and a variety of operating systems at a crime or incident scene involving computers

Match the terms with the correct definitions?. -Detecting data transmissions to and from a suspect's computer? and a network server to determine the type of data being transmitted over a network

The Fourth Amendment states that only warrants "particularly describing the place to be searched and the persons or things to be seized" can be issued. The courts have determined that this phrase means a warrant can authorize a search of a specific place for anything.

Understanding the Digital Forensics Profession and Investigations

The Investigators Office and Laboratory

Data Acquisition

Working With Windows and Cli Systems

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Recovering Graphics Files

Computer Forensics Analysis and Validation

Virtual Machine and Cloud Forensics

Live Acquisitions and Network Forensics

Email Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High Tech Investigations

Expert Testimony in High Tech Investigations

Ethics for the Investigator and Expert Witness

Filters

Exam 4: Processing Crime and Incident Scenes

​What does FRE stand for?

​The ____________________ doesn't extend to supporting a general exploratory search from one object to another unless something incriminating is found.

Match the terms with the correct definitions?. -The standard specifying whether a police officer has the right to make an arrest, conduct a personal or property search, or obtain a warrant for arrest

Which of the following is not done when preparing for a case?​

At a scene, technical advisors can help direct other investigators to collect evidence correctly. List the responsibilities of technical advisors.

An emergency situation under the PATRIOT Act is defined as the immediate risk of death or personal ​injury, such as finding a bomb threat in an e-mail.

What should you do while copying data on a suspect's computer that is still live?​

A _______ is not ​a private sector organization.

To verify data integrity, different methods of obtaining a unique identity for file data have been developed. Explain how you can use Cyclic Redundancy Check (CRC) and Message Digest 5 (MD5)​​ for this purpose.

The term _______ describes rooms filled with extremely large disk systems that are typically used by large business data centers.

Match the terms with the correct definitions?. -?An algorithm that produces a hexadecimal value of a file or storage media; used to determine whether data has changed

_______ does not recover data in free or slack space.

​ ________________ can be any information stored or transmitted in digital form.​

After you record the scene and shut down the system, you bag and tag the evidence. Describe the steps to follow for bagging and tagging evidence.?

Consistent practices help verify your work and enhance your credibility, so you must handle all evidence consistently. Explain why it's important to apply the same security and accountability controls for evidence in a civil lawsuit as in a major crime.

Match the terms with the correct definitions?. -A mathematic algorithm that translates a file into a unique hexadecimal value

Match the terms with the correct definitions?. -?A portable kit designed to process several computers and a variety of operating systems at a crime or incident scene involving computers

Match the terms with the correct definitions?. -Detecting data transmissions to and from a suspect's computer? and a network server to determine the type of data being transmitted over a network

The Fourth Amendment states that only warrants "particularly describing the place to be searched and the persons ​or things to be seized" can be issued. The courts have determined that this phrase means a warrant can authorize a search of a specific place for ​anything.​

Understanding the Digital Forensics Profession and Investigations

The Investigators Office and Laboratory

Data Acquisition

Working With Windows and Cli Systems

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Recovering Graphics Files

Computer Forensics Analysis and Validation

Virtual Machine and Cloud Forensics

Live Acquisitions and Network Forensics

Email Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High Tech Investigations

Expert Testimony in High Tech Investigations

Ethics for the Investigator and Expert Witness

Filters

What does FRE stand for?

The ____________________ doesn't extend to supporting a general exploratory search from one object to another unless something incriminating is found.

Which of the following is not done when preparing for a case?

An emergency situation under the PATRIOT Act is defined as the immediate risk of death or personal injury, such as finding a bomb threat in an e-mail.

What should you do while copying data on a suspect's computer that is still live?

A _______ is not a private sector organization.

To verify data integrity, different methods of obtaining a unique identity for file data have been developed. Explain how you can use Cyclic Redundancy Check (CRC) and Message Digest 5 (MD5) for this purpose.

________________ can be any information stored or transmitted in digital form.

The Fourth Amendment states that only warrants "particularly describing the place to be searched and the persons or things to be seized" can be issued. The courts have determined that this phrase means a warrant can authorize a search of a specific place for anything.