Cyber Security – CHFI with 100% Correct Answers Already Passed

The first step in preparing a computer for forensics investigation is: - Do not turn the computer off or on, run any programs, or attempt to access data on a computer The goal of forensic science is: - To determine the evidential value of the crime scene and related evidence Computer forensics is: - Science of capturing, processing, and investigating computer security incidents and making it acceptable to a court of law. The role of the forensic investigator is to: - Create an image backup of the original evidence without tampering with potential evidence What is the first step to be carried out in an investigation of a computer crime? - Obtain a search warrant When would you conduct searches without a warrant? - When destruction of evidence is imminent What is the "Best Evidence Rule"? - The court only allows the original evidence of a document, photograph, or recording at the trial rather than a copyWhat law is related to fraud and related activity in connection with computers? - 18 USC 1030 When is a checksum performed on the evidence? - while you acquire the data The definition of chain of custody is - The movement and location of physical evidence from the time it is obtained until the time it is presented in court. First responders should not - Prosecute a suspect When acquiring electronic evidence at scene of crime it is best not to: - shut down the computer First response to an incident may not be a forensics expert. Of the people listed here which is best capable of collecting, preserving, and packaging electronic evidence? - Forensic staff Forensic laboratory imaging system will have these qualities - very low image capture rate When building a forensic lab health and safety factors are critical because? - This is to protect the staff Tracks numbering on a hard disk begins at 0, typically reaching a value of ___________. - 1023