Digital Forensics, Investigation, and Response
Exam | Questions with 100% Correct Answers |
Verified | Latest Update 2026
Save
Terms in this set (157)
In a computer forensics investigation, Chain of custody
this describes the route that
evidence takes from the time you
find it until the case is closed or goes
to court.
If the computer is turned on when
you arrive, what does the Secret Shut the computer down according to the
Service recommend you do? recommended Secret Service procedure.
Why should you note all cable
connections for a computer you In case other devices were connected
want to seize as evidence?
What is the essence of the Daubert
standard? That only tools or techniques that have been
accepted by the scientific community are
admissible at trial
, When cataloging digital evidence,
the primary goal is to do what? Preserve evidence integrity.
Which of the following is important The logging methods
to the investigator regarding Log retention
logging? Location of stored logs
All of the above
Your roommate can give consent to True
search your computer. False
Evidence need not be locked if it is True
at a police station. False
When investigating a virus, what is
the first step? Document the virus.
Which of the following crimes is Cyberstalking
most likely to leave email evidence?
Where would you seek evidence that In the logs of the server; look for the reboot of the
Ophcrack had been used on a system
Windows Server 2008 machine?
Logic bombs are often perpetrated
by _________. disgruntled employees
It is legal for employers to monitor True
work computers.
Exam | Questions with 100% Correct Answers |
Verified | Latest Update 2026
Save
Terms in this set (157)
In a computer forensics investigation, Chain of custody
this describes the route that
evidence takes from the time you
find it until the case is closed or goes
to court.
If the computer is turned on when
you arrive, what does the Secret Shut the computer down according to the
Service recommend you do? recommended Secret Service procedure.
Why should you note all cable
connections for a computer you In case other devices were connected
want to seize as evidence?
What is the essence of the Daubert
standard? That only tools or techniques that have been
accepted by the scientific community are
admissible at trial
, When cataloging digital evidence,
the primary goal is to do what? Preserve evidence integrity.
Which of the following is important The logging methods
to the investigator regarding Log retention
logging? Location of stored logs
All of the above
Your roommate can give consent to True
search your computer. False
Evidence need not be locked if it is True
at a police station. False
When investigating a virus, what is
the first step? Document the virus.
Which of the following crimes is Cyberstalking
most likely to leave email evidence?
Where would you seek evidence that In the logs of the server; look for the reboot of the
Ophcrack had been used on a system
Windows Server 2008 machine?
Logic bombs are often perpetrated
by _________. disgruntled employees
It is legal for employers to monitor True
work computers.
