C702- Forensic Science Questions with Verified
Correct Answers
Forensic Readiness
Forensic readiness refers to an organization's ability to make optimal use of digital evidence
in a limited period and with minimal investigation costs. It includes technical and
nontechnical actions that maximize an organization's competence to use digital evidence.
Collect and preserve evidence
Computer Forensics Objectives
Identify, gather and preserve the evidence of a cybercrime.
Track and prosecute the perpetrators in a court of law.
Interpret, document and present the evidence to be admissible during prosecution.
Estimate the potential impact of a malicious activity on the victim and assess the intent of the
perpetrator.
Find vulnerabilities and security loopholes that help attackers.
Understand the techniques and methods used by attackers to avert prosecution, and
overcome them.
Recover deleted files, hidden files, and temporary data that could be used as evidence.
Perform incident response to prevent further loss of intellectual property, finances and
reputation during an attack.
Have knowledge about the laws of various regions and areas, as digital crimes are
omnipresent and remote in nature.
Know the process of handling multiple platforms, data types and operating systems.
Understand the usage of proper tools for forensic investigations.
, To minimize the tangible and intangible losses to the organization
To protect the organization from similar incidents in future
Computer Forensics
Techniques to identify, gather, preserve, extract, interpret, document and present evidence
from computing equipment
Internal Attacks
Include espionage, theft of intellectual property, manipulation of records, and Trojan horse
attack.
This type of attack can be extremely difficult to detect or protect against as the attackers are
aware of the loopholes, vulnerabilities and security settings of a firm.
External Attacks
Include SQL attack, brute force cracking, identity theft, phishing/spoofing, denial of service
attack, and cyber defamation.
Inadequate security policies and procedures.
Cyber crime investigation
The studying a digital crime, its impact and other details to identify the source and
perpetrators of the attack and prove their guilt.
Expert Witness
Offers a formal opinion as a testimony in a court of law.
Help to authenticate the facts and witnesses during any complex case.
Also assist in cross-examining witnesses and evidence; as various factors may influence a
normal witness.
Correct Answers
Forensic Readiness
Forensic readiness refers to an organization's ability to make optimal use of digital evidence
in a limited period and with minimal investigation costs. It includes technical and
nontechnical actions that maximize an organization's competence to use digital evidence.
Collect and preserve evidence
Computer Forensics Objectives
Identify, gather and preserve the evidence of a cybercrime.
Track and prosecute the perpetrators in a court of law.
Interpret, document and present the evidence to be admissible during prosecution.
Estimate the potential impact of a malicious activity on the victim and assess the intent of the
perpetrator.
Find vulnerabilities and security loopholes that help attackers.
Understand the techniques and methods used by attackers to avert prosecution, and
overcome them.
Recover deleted files, hidden files, and temporary data that could be used as evidence.
Perform incident response to prevent further loss of intellectual property, finances and
reputation during an attack.
Have knowledge about the laws of various regions and areas, as digital crimes are
omnipresent and remote in nature.
Know the process of handling multiple platforms, data types and operating systems.
Understand the usage of proper tools for forensic investigations.
, To minimize the tangible and intangible losses to the organization
To protect the organization from similar incidents in future
Computer Forensics
Techniques to identify, gather, preserve, extract, interpret, document and present evidence
from computing equipment
Internal Attacks
Include espionage, theft of intellectual property, manipulation of records, and Trojan horse
attack.
This type of attack can be extremely difficult to detect or protect against as the attackers are
aware of the loopholes, vulnerabilities and security settings of a firm.
External Attacks
Include SQL attack, brute force cracking, identity theft, phishing/spoofing, denial of service
attack, and cyber defamation.
Inadequate security policies and procedures.
Cyber crime investigation
The studying a digital crime, its impact and other details to identify the source and
perpetrators of the attack and prove their guilt.
Expert Witness
Offers a formal opinion as a testimony in a court of law.
Help to authenticate the facts and witnesses during any complex case.
Also assist in cross-examining witnesses and evidence; as various factors may influence a
normal witness.
