Question 1

_______ is a common cause for lost or corrupted evidence.

Accepted Answer

A) ​Public access 
B) ​Not having enough people on the processing team 
C) Having an undefined security perimeter 
D) Professional curiosity 
A) ​Public access 
B) ​Not having enough people on the processing team 
C) Having an undefined security perimeter 
D) Professional curiosity

Question 2

The term _______ is used to describe someone who might be a suspect or someone with additional knowledge that can provide enough evidence of probable cause for a search warrant or arrest.

Accepted Answer

A) ​criminal 
B) ​potential data source 
C)  person of interest 
D) witness 
A) ​criminal 
B) ​potential data source 
C)  person of interest 
D) witness

Question 3

Describe the steps that must be taken to create image file?s.

Accepted Answer

You use the following steps to create im

Question 4

Computer-stored records are data the system maintains, such as system log files and proxy server logs​.

Accepted Answer

A) True 
 B)False

Question 5

With digital evidence, you need to consider how and on what type of media to save it and what type of storage device is recommended to secure it. ​The media you use to store digital evidence usually depends on how long you need to keep it. If you investigate criminal matters, store the evidence as long as you can. Name five ideal media types on which to store digital data.

Accepted Answer

The ideal media on w

Question 6

In cases that involve dangerous settings, what kind of team should be used to recover evidence from the scene?​

Accepted Answer

A) ​B-Team 
B) ​HAZMAT 
C) CDC First Responders 
D) SWAT 
A) ​B-Team 
B) ​HAZMAT 
C) CDC First Responders 
D) SWAT

Question 7

Match the terms with the correct definitions?.
-A value created by an encryption utility's secret key?

Accepted Answer

A) ?Computer-generated records 
B) Keyed hash set? 
C) ?Cyclic Redundancy Check 
D) ?Message Digest 5 
E) ?Computer-stored records
F)?Probable cause
G)?Extensive-response field kit
H)Sniffing
I)?Nonkeyed hash set
J)Initial-response field kit 
A) ?Computer-generated records 
B) Keyed hash set? 
C) ?Cyclic Redundancy Check 
D) ?Message Digest 5 
E) ?Computer-stored records
F)?Probable cause
G)?Extensive-response field kit
H)Sniffing
I)?Nonkeyed hash set
J)Initial-response field kit

Question 8

_______ would not be found in an initial-response field kit.

Accepted Answer

A) ​Computer evidence bags (antistatic bags) 
B) ​Leather gloves and disposable latex gloves 
C) A digital camera with extra batteries or 35mm camera with film and flash 
D) External USB devices or a portable hard drive 
A) ​Computer evidence bags (antistatic bags) 
B) ​Leather gloves and disposable latex gloves 
C) A digital camera with extra batteries or 35mm camera with film and flash 
D) External USB devices or a portable hard drive

Question 9

Match the terms with the correct definitions?.
-A portable kit containing only the minimum ?tools needed to perform disk acquisitions and preliminary forensics analysis in the field

Accepted Answer

A) ?Computer-generated records 
B) Keyed hash set? 
C) ?Cyclic Redundancy Check 
D) ?Message Digest 5 
E) ?Computer-stored records
F)?Probable cause
G)?Extensive-response field kit
H)Sniffing
I)?Nonkeyed hash set
J)Initial-response field kit 
A) ?Computer-generated records 
B) Keyed hash set? 
C) ?Cyclic Redundancy Check 
D) ?Message Digest 5 
E) ?Computer-stored records
F)?Probable cause
G)?Extensive-response field kit
H)Sniffing
I)?Nonkeyed hash set
J)Initial-response field kit

Question 10

Which system below can be used to quickly and accurately match fingerprints in a database?​

Accepted Answer

A) ​Fingerprint Identification Database (FI
D)  
B) ​Systemic Fingerprint Database (SF
D)  
C) Automated Fingerprint Identification System (AFIS) 
D) Dynamic Fingerprint Matching System (DFMS) 
A) ​Fingerprint Identification Database (FI
D)  
B) ​Systemic Fingerprint Database (SF
D)  
C) Automated Fingerprint Identification System (AFIS) 
D) Dynamic Fingerprint Matching System (DFMS)

_______ is a common cause for lost or corrupted evidence.

The term _______ is used to describe someone who might be a suspect or someone with additional knowledge that can provide enough evidence of probable cause for a search warrant or arrest.

Describe the steps that must be taken to create image file?s.

Computer-stored records are data the system maintains, such as system log files and proxy server logs.

In cases that involve dangerous settings, what kind of team should be used to recover evidence from the scene?

Match the terms with the correct definitions?. -A value created by an encryption utility's secret key?

_______ would not be found in an initial-response field kit.

Match the terms with the correct definitions?. -A portable kit containing only the minimum ?tools needed to perform disk acquisitions and preliminary forensics analysis in the field

Which system below can be used to quickly and accurately match fingerprints in a database?

Understanding the Digital Forensics Profession and Investigations

The Investigators Office and Laboratory

Data Acquisition

Working With Windows and Cli Systems

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Recovering Graphics Files

Computer Forensics Analysis and Validation

Virtual Machine and Cloud Forensics

Live Acquisitions and Network Forensics

Email Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High Tech Investigations

Expert Testimony in High Tech Investigations

Ethics for the Investigator and Expert Witness

Filters

Exam 4: Processing Crime and Incident Scenes

_______ is a common cause for lost or corrupted evidence.

The term _______ is used to describe someone who might be a suspect or someone with additional knowledge that can provide enough evidence of probable cause for a search warrant or arrest.

Describe the steps that must be taken to create image file?s.

Computer-stored records are data the system maintains, such as system log files and proxy server logs​.

In cases that involve dangerous settings, what kind of team should be used to recover evidence from the scene?​

Match the terms with the correct definitions?. -A value created by an encryption utility's secret key?

_______ would not be found in an initial-response field kit.

Match the terms with the correct definitions?. -A portable kit containing only the minimum ?tools needed to perform disk acquisitions and preliminary forensics analysis in the field

Which system below can be used to quickly and accurately match fingerprints in a database?​

Understanding the Digital Forensics Profession and Investigations

The Investigators Office and Laboratory

Data Acquisition

Working With Windows and Cli Systems

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Recovering Graphics Files

Computer Forensics Analysis and Validation

Virtual Machine and Cloud Forensics

Live Acquisitions and Network Forensics

Email Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High Tech Investigations

Expert Testimony in High Tech Investigations

Ethics for the Investigator and Expert Witness

Filters

Computer-stored records are data the system maintains, such as system log files and proxy server logs.

In cases that involve dangerous settings, what kind of team should be used to recover evidence from the scene?

Which system below can be used to quickly and accurately match fingerprints in a database?