Test 1

Question 1

A corporate employer may consent to a search of an employee’s computer and peripherals if the employer has common authority over the equipment.
1) True
2 )False

Answer 1

1) True

Question 2

Which of the following is a wireless interface standard?
A) eSATA

B) Bluetooth

C) FireWire

D) USB

Answer 2

B) Bluetooth

Question 3

A computer forensic examiner is qualified to do all of the following except which one?

A)

Provide advice to attorneys about computer-related evidence in court

B)

Help prepare a court case

C)

Serve as an expert witness in a court case

D)

Determine the outcome of a court case

Answer 3

D) Determine the outcome of a court case

Question 4

Digital evidence is only useful in a Court of Law.

1) True
2) False

Answer 4

2) False

Question 5

Prosecuting attorneys should have training on electronic discovery and digital data, and how to properly present computer evidence in a court of law.

1) True
2) False

Answer 5

1) True

Question 6

Attorneys and police are encountering progressively more digital evidence in their work.

1) True
2) False

Answer 6

1) True

Question 7

What device tends to offer the highest data capacity?

A)

Blu-ray Disc

B)

USB flash drive

C)

External hard drive

D)

Jaz disk

Answer 7

C)

External hard drive

Question 8

When a computer forensic professional assists law enforcement in an investigation, the forensic professional is bound by the same restrictions as law enforcement personnel.

1) True
2) False

Answer 8

1) True

Question 9

Computer professionals who take inappropriate actions when they encounter child pornography on their employer’s systems can lose their jobs or break the law.

1) True
2) False

Answer 9

1) True

Question 10

This is a type of non-technical attack that plays on human nature to get people to divulge private or sensitive information, such as a password. (two words)______

Answer 10

Social Engineering

Question 11

Video surveillance can be a form of digital evidence.

1) True
2) False

Answer 11

1) True

Question 12

Forensic science is the application of science to investigation and prosecution of crime or to the just resolution of conflict.

1) True
2) False

Answer 12

1) True

Question 13

Which of the following is most likely to hire a computer forensic professional to gather computer evidence of possible fraud in accident, arson, and workman’s compensation cases?

A)

Civil litigators

B)

Individuals

C)

Insurance companies

D)

Criminal prosecutors

Answer 13

C) Insurance Companies

Question 14

Which of the following roles may involve computer forensics? (Choose all that apply.)

A)

Private investigator

B)

Corporate compliance professional

C)

Law enforcement official

D)

Medical examiner

E)

A and B only

Answer 14

A)

Private investigator

B)

Corporate compliance professional

C)

Law enforcement official

Question 15

A _____________ is a USB device that intercepts, records, and stores everything typed on a keyboard into a file. This includes all keystrokes, even passwords

Answer 15

Keylogger

Question 16

Many states have laws that require businesses to protect sensitive personal and financial data, and to report data breaches.

1) True
2) False

Answer 16

1) True

Question 17

Which operating systems are based on Unix? (Choose all that apply.)

1)

Windows 7

2)

Linux

3)

Mac OS X

4)

Windows Server 2008

Answer 17

2)

Linux

3)

Mac OS X

Question 18

The most common Microsoft systems a computer forensic investigator will encounter today are Windows XP, Windows Vista, and Windows 7.

1) True
2) False

Answer 18

1) True

Question 19

Information stored on devices such as hard disks and USB flash drives is ___________, which means it persists intact when such a device is powered off (and sometimes even after erasure). (one word, or two words separated by a dash)

Answer 19

nonvolatile

Question 20

Computers were involved in the investigations into both World Trade Center attacks.

1) True
2) False

Answer 20

1) True

Question 21

Digital evidence can oftentimes be duplicated exactly without any changes to the original data.

1) True
2) False

Answer 21

1) True

Question 22

Even digital investigations that do not result in legal action can benefit from principles of forensic science.

1) True
2) False

Answer 22

1) True

Question 23

When a file is deleted from a hard drive, it can often be recovered.

1) True
2) False

Answer 23

1) True

Question 24

Mobile devices generally use flash memory instead of a hard drive for storage to keep them as light and small as possible.

1) True
2) False

Answer 24

1) True

Question 25

All forensic examinations should be performed on the original digital evidence.

1) True
2) False

Answer 25

2) False