UNIT 2 QUIZ
Question 1 (1 point)
What is a forensic image collection technique that captures all files that
are visible to the user (but not lost or deleted items)?
Question 1 options:
None of the above
A physical device collection
A logical image of a device
A target collection
Question 2 (1 point)
How does virtualization provide preservation?
Question 2 options:
Virtualization allows you to reset the machine image after each inspection change.
A virtual machine ensures the original device remains untouched.
A virtual machine doesn't provide any preservation capabilities.
A virtual machine can be stored on a thumb drive for transport and safe keeping.
Question 3 (1 point)
What is the chain of custody?
Question 3 options:
The list of all employees of the crime lab
A log of everyone who has read about the digitally collected evidence
A documentation process that protects evidence from contamination and tampering and preserves
evidence integrity
A list of every artifact of evidence collected
Question 1 (1 point)
What is a forensic image collection technique that captures all files that
are visible to the user (but not lost or deleted items)?
Question 1 options:
None of the above
A physical device collection
A logical image of a device
A target collection
Question 2 (1 point)
How does virtualization provide preservation?
Question 2 options:
Virtualization allows you to reset the machine image after each inspection change.
A virtual machine ensures the original device remains untouched.
A virtual machine doesn't provide any preservation capabilities.
A virtual machine can be stored on a thumb drive for transport and safe keeping.
Question 3 (1 point)
What is the chain of custody?
Question 3 options:
The list of all employees of the crime lab
A log of everyone who has read about the digitally collected evidence
A documentation process that protects evidence from contamination and tampering and preserves
evidence integrity
A list of every artifact of evidence collected
