Deck 17: Computer Crime

Question 1

Which of the following statements about reshipper schemes is correct?

A)These schemes typically involve employees of the U.S.Postal Service, UPS, FedEx, or similar businesses.
B)The masterminds of reshipper schemes often initiate contact with their victims in chat rooms.
C)Scam artists who organize these schemes are frequently charged with sabotage.
D)These schemes involve intercepting a computer, installing spyware, and sending the computer to its destination.

Answer 1

B

Question 2

Which process is often considered synonymous with phishing and involves acquiring unauthorized access to a computer or network through a message using an IP address appearing to be from a trusted host, in an attempt to commit identity theft?

A)snarking
B)spoofing
C)sniping
D)shadowing

Answer 2

B

Question 3

Common protocol for processing a crime scene involving electronic evidence includes which of the following?

A)photographing and diagramming the placement of all computer terminals
B)holding the IT staff in quarantine until reinforcements arrive
C)obtaining a search warrant
D)unplugging all computers, telephones, and printers

Answer 3

C

Question 4

Which of the following is one of the three general categories of cybercriminals?

A)pharmer
B)hacker
C)white hat
D)IT professionals

Question 5

Digital evidence is often contained on:

A)printers and scanners.
B)VCRs and GPS devices.
C)hard drives or CDs.
D)telephones and fax machines.

Question 6

Cybercrime is:

A)a local problem.
B)a transnational problem.
C)strictly a federal problem.
D)a minor problem.

Question 7

Port scanning is:

A)looking for access into a computer.
B)scanning for a portable computer that is using a wireless system.
C)removing data.
D)linking access codes.

Question 8

Most computer crimes are:

A)not reported.
B)reported in excessive amounts to local authorities.
C)reported frequently.
D)reported to the federal government.

Question 9

Computer evidence is:

A)next to impossible to destroy.
B)destroyed only by fire or intense heat.
C)easy to destroy.
D)preserved by magnetic fields.

Question 10

The biggest difference between traditional evidence and computer evidence is the latter's:

A)electronic nature.
B)lack of availability.
C)storage on discs.
D)fragility.

Question 11

A virus attack may replace or destroy data on the computer's hard drive and:

A)identify bank accounts and financial records.
B)leave a "back door" open for later entry.
C)obtain one's access codes.
D)defraud the end user.

Question 12

Skimming is defined as:

A)monitoring data traveling along a data network.
B)scavenging through a business's garbage looking for useful information.
C)exploiting the telephone system's vulnerabilities to acquire free access to Internet provider systems.
D)a method in which a device is placed in a card reader to record sensitive information.

Question 13

A secretly attached program that monitors a computer system and waits for an error to occur so that the weakness may be exploited is called a:

A)shadow bomb.
B)logic bomb.
C)super-program.
D)turtle.

Question 14

NW3C stands for:

A)North West Computer Crime Center.
B)National White Collar Crime Center.
C)New West Crime Center Corporation.
D)National White Collar Criminological Center.

Question 15

A malicious program hidden inside an apparently harmless, legitimate program, intended to carry out unauthorized or illegal functions, is called a:

A)salami slice.
B)logic bomb.
C)super-zapper.
D)Trojan horse.

Question 16

IC3 stands for:

A)International Computer Crime Categorization.
B)International Computer Classification Corporation.
C)Internet Crime Complaint Center.
D)Internet Computer Crime Commission

Question 17

Theft of intellectual property:

A)involves the theft of ideas, not property.
B)is hacking into a computer and stealing individual programs, not ideas.
C)involves the pirating of proprietary information and copyrighted material.
D)only applies to written material.

Question 18

A zombie is a computer:

A)used to spoof or falsify IP and e-mail addresses.
B)that has been rendered nonfunctional by a virus.
C)used by hackers to copy other computer programs.
D)that has been taken over by another computer.

Question 19

Which of the following statements is true?

A)A static IP address does not fluctuate and is thus more secure.
B)A dynamic IP address fluctuates and is thus more secure.
C)An ISP is a unique number, analogous to a phone number.
D)An IP address is directly linked to the location of the building where the computer can be found.

Question 20

Intentionally destroying computer information, programs, or hardware using a logic bomb is classified as:

A)embezzlement.
B)espionage.
C)extortion.
D)sabotage.

Question 21

Cybercriminals are solitary by nature and rarely operate in groups.

Question 22

Cyberterrorism is a premeditated, politically motivated attack against information, computer systems, computer programs, and data that results in violence against noncombatant targets.

Question 23

Less than one percent of U.S.residents aged 16 or older were victims of identity theft in 2012.

Question 24

Investigators do not need to be concerned that digital evidence may also contain physical evidence such as DNA, fingerprints, or serology.

Question 25

Spyware is most commonly used to infiltrate national security systems, with the ultimate goal of disarming national defense systems.

Question 26

Which of the following specialists are frequently consulted in the team approach to investigating computer crime?

A)mathematicians
B)auditors
C)social media specialists
D)logicians

Question 27

What type of material should be used when packaging electronic evidence?

A)cellophane
B)aluminum
C)plastic materials
D)paper bags

Question 28

Keystroke logging is used in espionage to bypass security measures and obtain passwords.

Question 29

Adware is a covert way to advertise on Web sites without having to pay a fee.

Question 30

Viruses are more powerful and destructive than worms.

Question 31

A search warrant is needed to search a computer connected to the Internet.

Question 32

The terms Internet and Web are basically interchangeable.

Question 33

Transmission of computer viruses and worms may be prosecuted under the federal provisions of the computer fraud and abuse statute relating to damage to computer systems and files.

Question 34

Computer disks should be stored away from:

A)magnetic fields
B)metal.
C)partials.
D)light.

Question 35

Electronic evidence is fragile.

Question 36

The USA PATRIOT Act, signed by President George W.Bush in 2001, grants:

A)roving authority to the FBI and other law enforcement agents to serve orders on communications carriers.
B)total authority to the FBI for wiretapping the communication lines of any U.S.citizen.
C)total authority to the FBI to arrest any noncitizen who is under suspicion of using communication lines to plan a terrorist attack.
D)roving authority to the FBI for wiretapping the communication lines of any American.

Question 37

An attempt to get victims to disclose personal, sensitive information such as passwords and bank account numbers is referred to as phishing.

Question 38

The suffixes ".com," ".gov," and ".int" are common examples of ISPs.

Question 39

If a computer is left on at crime scene, the first responder should leave the computer on.

Question 40

Which of the following statements is true?

A)Because most police departments have limited reliance on computers, a cyberattack is unlikely to have significant consequences.
B)Security of the police department's computers is basically a nonissue, because most police departments have highly trained computer specialists on staff.
C)Systems that control computer-aided dispatch, records management applications and offender databases are a low priority for security.
D)Any computer in the department that is attached to a phone line is accessible by unauthorized people outside the department.

Question 41

What is the 2014 U.S.State of Cybercrime Survey and what were its results?

Question 42

The Privacy Protection Act establishes that investigators are allowed to seize drafts of newsletters or Web pages if there is reason to believe that the seizure is necessary in order to prevent death or serious bodily injury.

Question 43

_______________ is any procedure used in cryptography to convert plain text into cipher-text to prevent anyone but the intended recipient from reading the data.

Question 44

What did the Supreme Court decide in the case of Ashcroft v.Free Speech Coalition (2002) where the
issue involved the use of "virtual" child pornography?

Question 45

Child pornography, fraud, and gambling are examples of crimes in which the computer is used as a(n)
_______________.

Question 46

It may be possible to retrieve electronic memory devices within cell phones.

Question 47

Data is the residual physical representation of data that have been erased.

Question 48

When unsolicited commercial e-mail, also known as _______________, is distributed on a massive scale with malicious or contentious content or with intent to defraud, it becomes criminal.

Question 49

Most e-crimes are handled without involving legal action or law enforcement.

Question 50

Discuss some of the difficulties in reporting, investigating, and prosecuting Internet crimes that are transnational in scope.

Question 51

Because successful criminal prosecution of intellectual property theft requires reliable investigative resources, the Cyber Division and the Intellectual Property Rights Division were created by the _______________ to investigate intellectual property theft and fraud.

Question 52

Perverted Justice is an Internet-based organization that is committed to assisting victims of cybercrime.

Question 53

Very few states have enacted computer crime statutes.

Question 54

Computer crimes can also include hidden messages or images, which may appear as an innocent cover message
or picture.The Greek word for "hidden writing" refers to this process as .

Question 55

_______________ involves the hijacking of a domain name in order to redirect online traffic toward a bogus Web site.

Question 56

Most computer crimes against businesses and organizations are committed by outsiders.

Question 57

Define the "ON/OFF rule" and explain why it is imperative in any cybercrime investigation.

Question 58

Describe the basic elements of a "reshipper scheme."

Question 59

A computer program such as Google Chrome that accesses and displays data from the Internet or other networks is called a(n) ______________.

Question 60

What are the elements of common protocol for processing a crime scene involving electronic evidence?

Question 61

List and briefly describe the various resources (agencies or organizations) available to help law enforcement investigate computer crimes.

Question 62

Outline the NetSmartz program, including its mission and how it has been implemented.

Question 63

Outline some examples of the type of computer crime evidence that may be found in an investigation.

Question 64

Discuss some of the challenges of investigating a business environment versus a stand-alone computer.

Question 65

Describe the three general categories of cybercriminals and their respective motivations.

Question 66

How could the Privacy Protection Act (PPA) impact a computer crime investigation? What issues should be considered?

Question 67

How can computer crimes be prevented? Who is primarily responsible for putting new policies into place?

Question 68

What are some of the guidelines investigators must adhere to when dealing with physical evidence in a computer crime case?

Question 69

What are some of the essential questions that investigators should ask when interviewing employees and staff at a business or organization that has been the victim of computer crime?