Guide to Computer Forensics and Investigations 5Th Ed Bill Nelson Amelia - Test Bank

,Name Clas Dat
: s: e:

Chapter 01: Understanding the Digital Forensics Profession and Investigations
True / False

1. According to the National Institute of Standards and Technology (NIST), digital forensics involves scientifically
examining and analyzing data from computer storage media so that it can be used as evidence in court.
a. True
b. False
ANSWER: False
POINTS: 1
REFERENCES: 4
QUESTION TYPE: True / False
HAS VARIABLES: False
DATE CREATED: 7/30/2014 7:17 AM
DATE MODIFIED: 9/27/2014 4:16 PM

2. All suspected industrial espionage cases should be treated as civil case investigations.
a. True
b. False
ANSWER: False
POINTS: 1
REFERENCES: 32
QUESTION TYPE: True / False
HAS VARIABLES: False
DATE CREATED: 7/30/2014 7:50 AM
DATE MODIFIED: 9/27/2014 4:16 PM

3. User groups for a specific type of system can be very useful in a forensics investigation.
a. True
b. False
ANSWER: True
POINTS: 1
REFERENCES: 9
QUESTION TYPE: True / False
HAS VARIABLES: False
DATE CREATED: 7/30/2014 7:12 PM
DATE MODIFIED: 9/27/2014 4:16 PM

4. Most digital investigations in the private sector involve misuse of computing assets.
a. True
b. False
ANSWER: True
POINTS: 1
REFERENCES: 17
QUESTION TYPE: True / False
Copyright Cengage Learning. Powered by Cognero. Page 1

,Name Clas Dat
: s: e:

Chapter 01: Understanding the Digital Forensics Profession and Investigations

HAS VARIABLES: False
DATE CREATED: 7/30/2014 7:24 PM
DATE MODIFIED: 9/27/2014 4:16 PM

5. If you turn evidence over to law enforcement and begin working under their direction, you have become an agent of
law enforcement, and are subject to the same restrictions on search and seizure as a law enforcement agent.
a. True
b. False
ANSWER: True
POINTS: 1
REFERENCES: 18
QUESTION TYPE: True / False
HAS VARIABLES: False
DATE CREATED: 7/30/2014 7:27 PM
DATE MODIFIED: 9/27/2014 4:17 PM

Multiple Choice

6. Signed into law in 1973, the _______ was/were created to ensure consistency in federal proceedings.
a. Federal Proceedings Law
b. Federal Rules of Evidence
c. Federal Consistency Standards
d. Federal Proceedings Rules
ANSWER: b
POINTS: 1
REFERENCES: 3
QUESTION TYPE: Multiple Choice
HAS VARIABLES: False
DATE CREATED: 7/30/2014 12:56 AM
DATE MODIFIED: 9/27/2014 4:17 PM

7. Which amendment to the U.S. Constitution protects everyone's right to be secure in their person, residence, and
property from search and seizure?
a. First Amendment
b. Second Amendment
c. Fourth Amendment
d. Fifth Amendment
ANSWER: c
POINTS: 1
REFERENCES: 3
QUESTION TYPE: Multiple Choice
HAS VARIABLES: False
DATE CREATED: 7/30/2014 7:26 AM
Copyright Cengage Learning. Powered by Cognero. Page 2

, Name Clas Dat
: s: e:

Chapter 01: Understanding the Digital Forensics Profession and Investigations

DATE MODIFIED: 9/27/2014 4:17 PM

8. Which Microsoft OS below is the least intrusive to disks in terms of changing data?
a. Windows 95
b. Windows XP
c. Windows 7
d. MS-DOS 6.22
ANSWER: d
POINTS: 1
REFERENCES: 35
QUESTION TYPE: Multiple Choice
HAS VARIABLES: False
DATE CREATED: 7/31/2014 10:08 PM
DATE MODIFIED: 9/27/2014 4:17 PM

9. _______ is not recommended for a digital forensics workstation.
a. A text editor tool
b. A write-blocker device
c. An SCSI card
d. Remote access software
ANSWER: d
POINTS: 1
REFERENCES: 36
QUESTION TYPE: Multiple Choice
HAS VARIABLES: False
DATE CREATED: 7/31/2014 10:12 PM
DATE MODIFIED: 9/27/2014 4:18 PM

10. Within a computing investigation, the ability to perform a series of steps again and again to produce the same results is
known as _______.
a. repeatable findings
b. reloadable steps
c. verifiable reporting
d. evidence reporting
ANSWER: a
POINTS: 1
REFERENCES: 48
QUESTION TYPE: Multiple Choice
HAS VARIABLES: False
DATE CREATED: 7/31/2014 10:15 PM
DATE MODIFIED: 9/27/2014 4:19 PM


Copyright Cengage Learning. Powered by Cognero. Page 3