WGU C702 Questions And Answers Updated 2025
A software company suspects that employees have set up automatic corporate email
forwarding to their personal inboxes against company policy. The company hires forensic
investigators to identify the employees violating policy, with the intention of issuing warnings
to them.
Which type of cybercrime investigation approach is this company taking? -
✔✔Administrative
Which model or legislation applies a holistic approach toward any criminal activity as a criminal
operation? - ✔✔Enterprise Theory of Investigation
What does a forensic investigator need to obtain before seizing a computing device in a
criminal case? - ✔✔Court warrant
Which activity should be used to check whether an application has ever been installed on a
computer? - ✔✔Log review
Which characteristic describes an organization's forensic readiness in the context of
cybercrimes? - ✔✔It includes cost considerations.
A cybercrime investigator identifies a Universal Serial Bus (USB) memory stick containing emails
as a primary piece of evidence.
Who must sign the chain of custody document once the USB stick is in evidence? - ✔✔Those
who obtain access to the device
Which type of attack is a denial-of-service technique that sends a large amount of data to
overwhelm system resources? - ✔✔Mail bombing
, Which computer crime forensics step requires an investigator to duplicate and image the
collected digital information? - ✔✔Acquiring data
What is the last step of a criminal investigation that requires the involvement of a computer
forensic investigator? - ✔✔Testifying in court
How can a forensic investigator verify an Android mobile device is on, without potentially
changing the original evidence or interacting with the operating system? - ✔✔Look for
flashing lights
What should a forensic investigator use to protect a mobile device if a Faraday bag is not
available? - ✔✔Aluminum foil
Which criterion determines whether a technology used by government to obtain information in
a computer search is considered innovative and requires a search warrant? - ✔✔Availability
to the general public
Which situation allows a law enforcement officer to seize a hard drive from a residence without
obtaining a search warrant? - ✔✔The evidence is in imminent danger.
Which legal document contains a summary of findings and is used to prosecute? -
✔✔Investigation report
What should an investigator use to prevent any signals from reaching a mobile phone? -
✔✔Faraday bag
A forensic investigator is called to the stand as a technical witness in an internet payment fraud
case.
Which behavior is considered ethical by this investigator while testifying? - ✔✔Providing and
explaining facts found during the investigation
A software company suspects that employees have set up automatic corporate email
forwarding to their personal inboxes against company policy. The company hires forensic
investigators to identify the employees violating policy, with the intention of issuing warnings
to them.
Which type of cybercrime investigation approach is this company taking? -
✔✔Administrative
Which model or legislation applies a holistic approach toward any criminal activity as a criminal
operation? - ✔✔Enterprise Theory of Investigation
What does a forensic investigator need to obtain before seizing a computing device in a
criminal case? - ✔✔Court warrant
Which activity should be used to check whether an application has ever been installed on a
computer? - ✔✔Log review
Which characteristic describes an organization's forensic readiness in the context of
cybercrimes? - ✔✔It includes cost considerations.
A cybercrime investigator identifies a Universal Serial Bus (USB) memory stick containing emails
as a primary piece of evidence.
Who must sign the chain of custody document once the USB stick is in evidence? - ✔✔Those
who obtain access to the device
Which type of attack is a denial-of-service technique that sends a large amount of data to
overwhelm system resources? - ✔✔Mail bombing
, Which computer crime forensics step requires an investigator to duplicate and image the
collected digital information? - ✔✔Acquiring data
What is the last step of a criminal investigation that requires the involvement of a computer
forensic investigator? - ✔✔Testifying in court
How can a forensic investigator verify an Android mobile device is on, without potentially
changing the original evidence or interacting with the operating system? - ✔✔Look for
flashing lights
What should a forensic investigator use to protect a mobile device if a Faraday bag is not
available? - ✔✔Aluminum foil
Which criterion determines whether a technology used by government to obtain information in
a computer search is considered innovative and requires a search warrant? - ✔✔Availability
to the general public
Which situation allows a law enforcement officer to seize a hard drive from a residence without
obtaining a search warrant? - ✔✔The evidence is in imminent danger.
Which legal document contains a summary of findings and is used to prosecute? -
✔✔Investigation report
What should an investigator use to prevent any signals from reaching a mobile phone? -
✔✔Faraday bag
A forensic investigator is called to the stand as a technical witness in an internet payment fraud
case.
Which behavior is considered ethical by this investigator while testifying? - ✔✔Providing and
explaining facts found during the investigation
