Question 1

The sale of sensitive or confidential company information to a competitor is known as _______.

Accepted Answer

A) ​industrial sabotage 
B) ​industrial espionage 
C) industrial collusion 
D) industrial betrayal 
A) ​industrial sabotage 
B) ​industrial espionage 
C) industrial collusion 
D) industrial betrayal

Question 2

Match the following terms with the correct definitions below:
-?The order in which people or positions are notified of a problem; these people or positions have the legal right to initiate an investigation, take possession of evidence, and have access to evidence

Accepted Answer

A) defense in depth (Di
D)  
B) distributed denial-of-service (DDoS) attacks 
C) honeypot 
D) honeywalls 
E) layered network defense strategy
F)network forensics
G)type 1 hypervisor
H)type 2 hypervisor
I)zero day attacks
J)zombies 
A) defense in depth (Di
D)  
B) distributed denial-of-service (DDoS) attacks 
C) honeypot 
D) honeywalls 
E) layered network defense strategy
F)network forensics
G)type 1 hypervisor
H)type 2 hypervisor
I)zero day attacks
J)zombies

Question 3

_______ describes an accusation of fact that a crime has been committed.

Accepted Answer

A) ?Attrition 
B) ?Attribution 
C) Allegation 
D) Assignment 
A) ?Attrition 
B) ?Attribution 
C) Allegation 
D) Assignment

Question 4

Match the following terms with the correct definitions below:
-?Text displayed on computer screens when people log on to a company computer; this text states ownership of the computer and specifies appropriate use of the machine or Internet access

Accepted Answer

A) defense in depth (Di
D)  
B) distributed denial-of-service (DDoS) attacks 
C) honeypot 
D) honeywalls 
E) layered network defense strategy
F)network forensics
G)type 1 hypervisor
H)type 2 hypervisor
I)zero day attacks
J)zombies 
A) defense in depth (Di
D)  
B) distributed denial-of-service (DDoS) attacks 
C) honeypot 
D) honeywalls 
E) layered network defense strategy
F)network forensics
G)type 1 hypervisor
H)type 2 hypervisor
I)zero day attacks
J)zombies

Question 5

Match the following terms with the correct definitions below:
-?An expert who analyzes digital evidence and determines whether additional specialists are needed

Accepted Answer

A) defense in depth (Di
D)  
B) distributed denial-of-service (DDoS) attacks 
C) honeypot 
D) honeywalls 
E) layered network defense strategy
F)network forensics
G)type 1 hypervisor
H)type 2 hypervisor
I)zero day attacks
J)zombies 
A) defense in depth (Di
D)  
B) distributed denial-of-service (DDoS) attacks 
C) honeypot 
D) honeywalls 
E) layered network defense strategy
F)network forensics
G)type 1 hypervisor
H)type 2 hypervisor
I)zero day attacks
J)zombies

Question 6

What questions should someone consider prior to assisting in an interview or interrogation?

Accepted Answer

The following questions should be consid

Question 7

Most digital investigations in the private sector involve misuse of computing assets.

Accepted Answer

A) True 
 B)False

Question 8

Why is it important to have a well-defined policy, especially when investigators and forensics examiners are involved?​

Accepted Answer

​Well-defined policies give computer inv

Question 9

Which Microsoft OS below is the least intrusive to disks in terms of changing data?​

Accepted Answer

A) ​Windows 95 
B) ​Windows XP 
C) Windows 7 
D) MS-DOS 6.22 
A) ​Windows 95 
B) ​Windows XP 
C) Windows 7 
D) MS-DOS 6.22

Question 10

Why is it important to maintain specific temperature and humidity ranges within a forensics lab?​

Accepted Answer

Without proper temperature and

Question 11

A(n) _______________ notifies end users that the organization owning the computer equipment reserves the right to inspect or search computer systems and network traffic at will.

Accepted Answer

The answer of A(n) _______________ notifies end users that the...

Question 12

​Within a computing investigation, the ability to perform a series of steps again and again to produce the same results is known as _______.

Accepted Answer

A) ​repeatable findings 
B) reloadable steps 
C) verifiable reporting 
D) evidence reporting 
A) ​repeatable findings 
B) reloadable steps 
C) verifiable reporting 
D) evidence reporting

Question 13

Match the following terms with the correct definitions below:
-The decision returned by a jury

Accepted Answer

A) defense in depth (Di
D)  
B) distributed denial-of-service (DDoS) attacks 
C) honeypot 
D) honeywalls 
E) layered network defense strategy
F)network forensics
G)type 1 hypervisor
H)type 2 hypervisor
I)zero day attacks
J)zombies 
A) defense in depth (Di
D)  
B) distributed denial-of-service (DDoS) attacks 
C) honeypot 
D) honeywalls 
E) layered network defense strategy
F)network forensics
G)type 1 hypervisor
H)type 2 hypervisor
I)zero day attacks
J)zombies

Question 14

A chain-of-evidence form, which is used to document what has and has not been done with the original evidence and forensic copies of the evidence, is also known as a(n) _______.

Accepted Answer

A) ​single-evidence form 
B) ​multi-evidence form 
C) evidence custody form 
D) evidence tracking form 
A) ​single-evidence form 
B) ​multi-evidence form 
C) evidence custody form 
D) evidence tracking form

Question 15

What is the difference between an interview and an interrogation?​

Accepted Answer

​An interview is conducted to collect in

Question 16

​A(n) ________________ states who has the legal right to initiate an investigation, who can take possession of evidence, and who can have access to evidence.

Accepted Answer

The answer of ​A(n) ________________ states who has the legal...

Question 17

Match the following terms with the correct definitions below:
-?The legal act of acquiring evidence for an investigation

Accepted Answer

A) defense in depth (Di
D)  
B) distributed denial-of-service (DDoS) attacks 
C) honeypot 
D) honeywalls 
E) layered network defense strategy
F)network forensics
G)type 1 hypervisor
H)type 2 hypervisor
I)zero day attacks
J)zombies 
A) defense in depth (Di
D)  
B) distributed denial-of-service (DDoS) attacks 
C) honeypot 
D) honeywalls 
E) layered network defense strategy
F)network forensics
G)type 1 hypervisor
H)type 2 hypervisor
I)zero day attacks
J)zombies

Question 18

Match the following terms with the correct definitions below:
-?A form that dedicates a page for each item retrieved for a case; it allows investigators to add more detail about exactly what was done to the evidence each time it was taken from the storage locker

Accepted Answer

A) defense in depth (Di
D)  
B) distributed denial-of-service (DDoS) attacks 
C) honeypot 
D) honeywalls 
E) layered network defense strategy
F)network forensics
G)type 1 hypervisor
H)type 2 hypervisor
I)zero day attacks
J)zombies 
A) defense in depth (Di
D)  
B) distributed denial-of-service (DDoS) attacks 
C) honeypot 
D) honeywalls 
E) layered network defense strategy
F)network forensics
G)type 1 hypervisor
H)type 2 hypervisor
I)zero day attacks
J)zombies

Question 19

​After the evidence has been presented in a trial by jury, the jury must deliver a(n) _______.

Accepted Answer

A) ​exhibit 
B) ​affidavit 
C) allegation 
D) verdict 
A) ​exhibit 
B) ​affidavit 
C) allegation 
D) verdict

Question 20

In what year was the Computer Fraud and Abuse Act passed?​

Accepted Answer

A) ​1976 
B) ​1980 
C) 1986 
D) 1996 
A) ​1976 
B) ​1980 
C) 1986 
D) 1996

The sale of sensitive or confidential company information to a competitor is known as _______.

Match the following terms with the correct definitions below: -?The order in which people or positions are notified of a problem; these people or positions have the legal right to initiate an investigation, take possession of evidence, and have access to evidence

_______ describes an accusation of fact that a crime has been committed.

Match the following terms with the correct definitions below: -?Text displayed on computer screens when people log on to a company computer; this text states ownership of the computer and specifies appropriate use of the machine or Internet access

Match the following terms with the correct definitions below: -?An expert who analyzes digital evidence and determines whether additional specialists are needed

What questions should someone consider prior to assisting in an interview or interrogation?

Most digital investigations in the private sector involve misuse of computing assets.

Why is it important to have a well-defined policy, especially when investigators and forensics examiners are involved?

Which Microsoft OS below is the least intrusive to disks in terms of changing data?

Why is it important to maintain specific temperature and humidity ranges within a forensics lab?

A(n) _______________ notifies end users that the organization owning the computer equipment reserves the right to inspect or search computer systems and network traffic at will.

Within a computing investigation, the ability to perform a series of steps again and again to produce the same results is known as _______.

Match the following terms with the correct definitions below: -The decision returned by a jury

A chain-of-evidence form, which is used to document what has and has not been done with the original evidence and forensic copies of the evidence, is also known as a(n) _______.

What is the difference between an interview and an interrogation?

A(n) ________________ states who has the legal right to initiate an investigation, who can take possession of evidence, and who can have access to evidence.

Match the following terms with the correct definitions below: -?The legal act of acquiring evidence for an investigation

Match the following terms with the correct definitions below: -?A form that dedicates a page for each item retrieved for a case; it allows investigators to add more detail about exactly what was done to the evidence each time it was taken from the storage locker

After the evidence has been presented in a trial by jury, the jury must deliver a(n) _______.

In what year was the Computer Fraud and Abuse Act passed?

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Working With Windows and Cli Systems

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Recovering Graphics Files

Computer Forensics Analysis and Validation

Virtual Machine and Cloud Forensics

Live Acquisitions and Network Forensics

Email Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High Tech Investigations

Expert Testimony in High Tech Investigations

Ethics for the Investigator and Expert Witness

Filters

Exam 1: Understanding the Digital Forensics Profession and Investigations

The sale of sensitive or confidential company information to a competitor is known as _______.

Match the following terms with the correct definitions below: -?The order in which people or positions are notified of a problem; these people or positions have the legal right to initiate an investigation, take possession of evidence, and have access to evidence

_______ describes an accusation of fact that a crime has been committed.

Match the following terms with the correct definitions below: -?Text displayed on computer screens when people log on to a company computer; this text states ownership of the computer and specifies appropriate use of the machine or Internet access

Match the following terms with the correct definitions below: -?An expert who analyzes digital evidence and determines whether additional specialists are needed

What questions should someone consider prior to assisting in an interview or interrogation?

Most digital investigations in the private sector involve misuse of computing assets.

Why is it important to have a well-defined policy, especially when investigators and forensics examiners are involved?​

Which Microsoft OS below is the least intrusive to disks in terms of changing data?​

Why is it important to maintain specific temperature and humidity ranges within a forensics lab?​

A(n) _______________ notifies end users that the organization owning the computer equipment reserves the right to inspect or search computer systems and network traffic at will.

​Within a computing investigation, the ability to perform a series of steps again and again to produce the same results is known as _______.

Match the following terms with the correct definitions below: -The decision returned by a jury

A chain-of-evidence form, which is used to document what has and has not been done with the original evidence and forensic copies of the evidence, is also known as a(n) _______.

What is the difference between an interview and an interrogation?​

​A(n) ________________ states who has the legal right to initiate an investigation, who can take possession of evidence, and who can have access to evidence.

Match the following terms with the correct definitions below: -?The legal act of acquiring evidence for an investigation

Match the following terms with the correct definitions below: -?A form that dedicates a page for each item retrieved for a case; it allows investigators to add more detail about exactly what was done to the evidence each time it was taken from the storage locker

​After the evidence has been presented in a trial by jury, the jury must deliver a(n) _______.

In what year was the Computer Fraud and Abuse Act passed?​

The Investigators Office and Laboratory

Data Acquisition

Processing Crime and Incident Scenes

Working With Windows and Cli Systems

Current Computer Forensics Tools

Macintosh and Linux Boot Processes and File Systems

Recovering Graphics Files

Computer Forensics Analysis and Validation

Virtual Machine and Cloud Forensics

Live Acquisitions and Network Forensics

Email Investigations

Cell Phone and Mobile Device Forensics

Report Writing for High Tech Investigations

Expert Testimony in High Tech Investigations

Ethics for the Investigator and Expert Witness

Filters

Why is it important to have a well-defined policy, especially when investigators and forensics examiners are involved?

Which Microsoft OS below is the least intrusive to disks in terms of changing data?

Why is it important to maintain specific temperature and humidity ranges within a forensics lab?

Within a computing investigation, the ability to perform a series of steps again and again to produce the same results is known as _______.

What is the difference between an interview and an interrogation?

A(n) ________________ states who has the legal right to initiate an investigation, who can take possession of evidence, and who can have access to evidence.

After the evidence has been presented in a trial by jury, the jury must deliver a(n) _______.

In what year was the Computer Fraud and Abuse Act passed?