Deck 19: Digital Evidence and the Electronic Crime Scene

Question 1

The term RCFL stands for the following:

A) Restrictive computerized field of light
B) Regional computer forensic laboratories
C) Regional computational form laboratories
D) Remote computer field laboratories

Answer 1

B

Question 2

Which of the following crimes are likely to involve digital devices?

A) Child pornography
B) Identity theft
C) Terrorism
D) All of the above

Answer 2

D

Question 3

The FBI defines digital forensics as the application of science and engineering to the recovery of digital evidence in a legally acceptable method

Answer 3

True

Question 4

Due to the unique nature of digital evidence a search warrant is not needed to secure this type of evidence

Question 5

Which of the following is the most appropriate way to collect computer evidence?

A) Use common software at the scene to start up the computer and copy it to a removable drive for later analysis
B) Allow an employee or homeowner to start of the computer and copy it to a removable drive for later analysis
C) Unplug the computer (that is not on a network), label all cables and transport to the lab for analysis
D) Reboot the computer prior to shutting down to save the data. Label all cords an accessories and package the computer for delivery to the lab for analysis

Question 6

You must be trained to an expert level for digital evidence to seize computer evidenced for subsequent analysis

Question 7

In certain circumstances, it may be necessary to do an on-scene evidence preview to help determine what specific devices to look for. A preview of a suspect's hard drive can show whether an external device like a USB thumb drive was connected and when. Who should perform this type of investigation in the field?

A) Crime scene investigator
B) First responder
C) Supervisor
D) Any investigator properly trained

Question 8

One of the first questions asked by investigators responding to the crime scene should be________.

A) Is there a video of the incident?
B) Where are the surveillance cameras?
C) Where are the video recorders stored?
D) All of the above

Question 9

When handling video evidence, you should note the _________ on the recorder and simultaneously note the ________ on a watch or clock

A) Counter, time
B) Time, time
C) Counter, hands
D) Time, counter

Question 10

You are the investigator of a homicide that took place in a strip mall near an apartment complex. Which of the following would you choose as a source of video footage to check to see if the crime was captured?

A) ATM videos
B) Video doorbells
C) Convenience store cameras
D) All of the above

Question 11

Why would an investigator document the video system's physical relationship to the crime scene?

A) Known reference object size can be used to determine physical dimensions of other things in the video such as the height of a suspect
B) It can be used to validate the authenticity of the video
C) It is part of the routine of sketching the scene
D) None of the above

Question 12

What is the benefit expected from the analysis of video recordings?

A) They can show the crime scene
B) They can provide a synopsis of a crime and/or a description of a crime scene that would be hard to describe in words alone
C) It provides images of action
D) All of the above

Question 13

What is the benefit of a fingerprint analyst at the scene reviewing video footage from the crime scene event?

A) They can see where the suspect was walking
B) They can focus on areas the suspect touched
C) They can evaluate the skin detail on the suspects hands
D) There is no benefit for them reviewing the video

Question 14

______________, is the discipline of image-based comparison of human facial features.

A) Facial recognition
B) Facial Identification
C) Forensic Artist
D) Facial line-up

Question 15

This device is used to block radio frequencies from reaching the mobile device and prevents usable wireless signals from going in or coming out.

A) Evidence bag/box
B) Filmore bag/box
C) Faraday bag/box
D) Plastic bag/box