Deck 11: Digital Evidence As Alibi

Question 1

In confirming an alibi involving an obscure piece of equipment, if no documentation is available, the manufacturer is no longer in business, or the equipment/network is so complicated that nobody fully understands how it works, you should:

A) State that the alibi is considered unproven
B) Search the Internet for any pertinent information
C) Recreate the events surrounding the alibi
D) Contact other investigators and average their opinions

Answer 1

C

Question 2

Absence of evidence refutes an alibi.

Answer 2

False

Question 3

Investigators can rely on one piece of digital evidence when examining an alibi.

Answer 3

False

Question 4

Investigators should not rely on one piece of digital evidence when examining an alibi - they should look for an associated__________ .

A) Cybertrail
B) Piece of physical evidence
C) Statement
D) None of the above

Question 5

It is quite difficult to fabricate an alibi on a network successfully because:

A) An offender may not have the proper access.
B) An offender would need system administrator access level to make the necessary changes.
C) An individual rarely has the ability to falsify digital evidence on all the computers that are involved.
D) Creating an alibi on a network could take months of work.

Question 6

With people spending an increasing amount of time using mobile devices, computers, and networks, it is very likely that more alibis will depend on digital evidence.

Question 7

Credit card companies are not permitted to keep records of the dates, times, and locations of all purchases.

Question 8

Computer networks can contain a large amount of information about times and locations.

Question 9

It is unwise to rely only on a recovered IP address because:

A) An IP address may change many times during a session.
B) Offenders can change their IP address.
C) By changing the system time, the contents of log files containing IP addresses can be falsified.
D) IP addresses only exist in system memory.

Question 10

When investigating an alibi that depends on digital evidence, the first step is to assess the reliability of the information on the computers and networks involved.

Question 11

Telephone companies keep a record of the number, the time and duration of the call, and sometimes the caller's number.

Question 12

Discuss the reasons why a digital investigator would confirm an alibi. Isn't that a job for the suspect's defense counsel?

Question 13

It is important to gather as many sources of supporting evidence as possible because:

A) The more evidence, the stronger the case.
B) No amount of supporting evidence can prove conclusively that an individual was in a specific place at a specific time.
C) The volume of evidence produced dictates the strength of the alibi.
D) None of the above.

Question 14

Types of digital evidence that might corroborate an alibi include:

A) Evidence of computer usage when the offense was supposed to occurred
B) Computer records from credit cards, the telephone company, or subway ticket usage
C) GPS information from mobile devices indicating the user's location and time
D) All of the above

Question 15

It is not easy to change the time on a personal computer.

Question 16

To demonstrate that someone is lying about an alibi, it is necessary to:

A) Find evidence that clearly demonstrates the lie
B) Require the suspect to submit to a polygraph
C) Interrogate the suspect using a number of methods
D) Show that no evidence confirming the alibi is available

Question 17

It is not difficult to fabricate an alibi on a network successfully.

Question 18

Digital evidence can rarely prove conclusively that someone was at a specific place at a specific time.