CHFI Module 1 – 2024 Questions and Answers Already Passed

CHFI Module 1 – 2024 Questions and Answers Already Passed Define "computer forensics". A set of methodological procedures and techniques that help identify, gather, preserve, extract, interpret, document, and present evidence from computers in a way that is legally admissible. T/F: Given that digital crimes are often remote in nature, it is important that a computer forensic professional be knowledgeable about the laws of various regions and areas. True. T/F: Computer forensic professionals are effective in preparing for incidents in advance. True; they are well suited to secure and strengthen defense mechanisms, as well as filling the holes in security prior to an incident. What is a "cybercrime"? __________ is defined as any illegal act involving a computing device, network, its systems, or its applications. There are Internal & External attacks. T/F: System peripherals (keyboards, mice, monitors, etc.) are of little use to computer forensic professionals and thus, are not taken into custody. False; The tools of the crime include the computer or workstation used for the crime including all hardware such as the keyboard, the mouse, and the monitor. Forensic investigators usually take all such tools into custody to use them as evidence. What are the 2 types of attacks in a cybercrime? Internal/Insider Attacks: Insider attacks refer to attacks by actors whom are inside the organization, ones who have legitimate access to the systems. External Attacks: External attacks originate from outside of an organization or can be remote in nature. Insider attacks are: A) Primary threats B) Secondary threats A) Primary threats External attacks are: A) Primary threats B) Secondary threats B) Secondary threats Provide an example of an "Insider Attack". Any 1 of the following: * Theft of intellectual property * Espionage * Manipulation of records * Trojan horse implantation Provide an example of an "External Attack". Any 1 of the following: * SQL attack * brute force cracking * identity theft * phishing/spoofing, * denial of service attack * cyber defamation. What are the 3 approaches used to manage cybercrime investigations? 1) Civil: Disputes between two parties, which may include an individual versus a company, an individual versus another individual, or a company versus another. They relate to violation of contracts and lawsuits, where a guilty verdict generally results in monetary damages to plaintiff. 2) Criminal: Crimes that are considered harmful to the society and involve action by law enforcement agencies against a company, individual, or group of individuals in response to a suspected violation of law. A guilty outcome may result in monetary damages, imprisonment, or both. 3) Administrative: Refers to an internal investigation by an organization to discover if its employees, clients, and partners are abiding by the rules or policies. T/F: Criminal and Civil cases have the same rules when it comes to the chain-of-custody of evidence. False; Criminal has strict chain-of-custody requirements, whereas civil has more relaxed evidence chain-of-custody requirements. In a criminal case, ____(1)____ are in charge of collecting evidence, whereas in a civil case, ____(2)____ are in charge of collecting evidence. 1): Law enforcement agencies