WGU C702 Exam Review: Forensics and
Network Intrusion Key Concepts 2026
What is a benefit of forensic readiness?
Establishes procedures for fast and efficient investigations
Reduces the need for interface with law enforcement
Eliminates the need to follow regulatory requirements
Ensures maximum regulatory fines for data disclosure ans ✔✨---Establishes procedures for fast
and efficient investigations
What should be considered when creating a forensic readiness plan?
Source of the evidence
Pertinence of the evidence
Problems that the evidence might cause in court
,Determination of which evidence to include in the report ans ✔✨---Source of the evidence
What allows for a lawful search to be conducted without a warrant or probable cause?
Imminent destruction of evidence
Initial search of the scene
Consent of person with authority
Obtained witness signatures ans ✔✨---Consent of person with authority
A forensic investigator is tasked with retrieving evidence where the primary server has been erased. The
investigator needs to rely on network logs and backup tapes to base their conclusions on while testifying
in court. Which information found in rules of evidence, Rule 1001, helps determine if this testimony is
acceptable to the court?
Definition of original evidence
Requirements of original evidence
Admissibility of duplicate evidence
Admissibility of other evidence ans ✔✨---Definition of original evidence
When can a forensic investigator collect evidence without formal consent?
When properly worded banners are displayed on the computer screen
When the suspect is a minor and lives with parents or guardians
, When devices are owned by a company and provisioned to its employees
When multiple people use the same equipment for daily work ans ✔✨---When properly worded
banners are displayed on the computer screen
Who determines whether a forensic investigation should take place if a situation is undocumented in
the standard operating procedures?
Decision maker
Attorney
Incident responder
Examiner ans ✔✨---Decision maker
What should a forensic lab do to maintain quality assurance during a digital forensic investigation?
Conduct validity testing on the tools
Download the latest version of the tools
Use only open-source tools
Use only proprietary tools ans ✔✨---Conduct validity testing on the tools
What is a common task of a computer forensic investigator?
Network Intrusion Key Concepts 2026
What is a benefit of forensic readiness?
Establishes procedures for fast and efficient investigations
Reduces the need for interface with law enforcement
Eliminates the need to follow regulatory requirements
Ensures maximum regulatory fines for data disclosure ans ✔✨---Establishes procedures for fast
and efficient investigations
What should be considered when creating a forensic readiness plan?
Source of the evidence
Pertinence of the evidence
Problems that the evidence might cause in court
,Determination of which evidence to include in the report ans ✔✨---Source of the evidence
What allows for a lawful search to be conducted without a warrant or probable cause?
Imminent destruction of evidence
Initial search of the scene
Consent of person with authority
Obtained witness signatures ans ✔✨---Consent of person with authority
A forensic investigator is tasked with retrieving evidence where the primary server has been erased. The
investigator needs to rely on network logs and backup tapes to base their conclusions on while testifying
in court. Which information found in rules of evidence, Rule 1001, helps determine if this testimony is
acceptable to the court?
Definition of original evidence
Requirements of original evidence
Admissibility of duplicate evidence
Admissibility of other evidence ans ✔✨---Definition of original evidence
When can a forensic investigator collect evidence without formal consent?
When properly worded banners are displayed on the computer screen
When the suspect is a minor and lives with parents or guardians
, When devices are owned by a company and provisioned to its employees
When multiple people use the same equipment for daily work ans ✔✨---When properly worded
banners are displayed on the computer screen
Who determines whether a forensic investigation should take place if a situation is undocumented in
the standard operating procedures?
Decision maker
Attorney
Incident responder
Examiner ans ✔✨---Decision maker
What should a forensic lab do to maintain quality assurance during a digital forensic investigation?
Conduct validity testing on the tools
Download the latest version of the tools
Use only open-source tools
Use only proprietary tools ans ✔✨---Conduct validity testing on the tools
What is a common task of a computer forensic investigator?
