WGU C702 CHFI AND OA |COMPLETE QUESTIONS WITH EXPERT
SOLUTIONS | 2026 LATEST UPDATED | GET A+
Which of the following is true regarding computer forensics? - (answer)Computer forensics deals
with the process of finding evidence related to a digital crime to find the culprits and initiate
legal action against them.
Which of the following is NOT a objective of computer forensics? - (answer)Document
vulnerabilities allowing further loss of intellectual property, finances, and reputation during an
attack.
Which of the following is true regarding Enterprise Theory of Investigation (ETI)? - (answer)It
adopts a holistic approach toward any criminal activity as a criminal operation rather as a single
criminal act.
Forensic readiness refers to: - (answer)An organization's ability to make optimal use of digital
evidence in a limited time period and with minimal investigation costs.
Which of the following is NOT a element of cybercrime? - (answer)Evidence smaller in size.
Which of the following is true of cybercrimes? - (answer)Investigators, with a warrant, have the
authority to forcibly seize the computing devices.
Which of the following is true of cybercrimes? - (answer)The initial reporting of the evidence is
usually informal.
Which of the following is NOT a consideration during a cybercrime investigation? -
(answer)Value or cost to the victim.
Which of the following is a user-created source of potential evidence? - (answer)Address book.
,Which of the following is a computer-created source of potential evidence? - (answer)Swap file.
Which of the following is NOT where potential evidence may be located? - (answer)Processor.
Under which of the following conditions will duplicate evidence NOT suffice? - (answer)When
original evidence is in possession of the originator.
Which of the following Federal Rules of Evidence governs proceedings in the courts of the
United States? - (answer)Rule 101.
Which of the following Federal Rules of Evidence ensures that the truth may be ascertained and
the proceedings justly determined? - (answer)Rule 102.
Which of the following Federal Rules of Evidence contains rulings on evidence? - (answer)Rule
103
Which of the following Federal Rules of Evidence states that the court shall restrict the evidence
to its proper scope and instruct the jury accordingly? - (answer)Rule 105
Which of the following refers to a set of methodological procedures and techniques to identify,
gather, preserve, extract, interpret, document, and present evidence from computing equipment
in such a manner that the discovered evidence is acceptable during a legal and/or administrative
proceeding in a court of law? - (answer)Computer Forensics.
Computer Forensics deals with the process of finding _____ related to a digital crime to find the
culprits and initiate legal action against them. - (answer)Evidence.
Minimizing the tangible and intangible losses to the organization or an individual is considered
an essential computer forensics use. - (answer)True.
,Cybercrimes can be classified into the following two types of attacks, based on the line of attack.
- (answer)Internal and External.
Espionage, theft of intellectual property, manipulation of records, and trojan horse attacks are
examples of what? - (answer)Insider attack or primary attacks.
External attacks occur when there are inadequate information-security policies and procedures. -
(answer)True.
Which type of cases involve disputes between two parties? - (answer)Civil.
A computer forensic examiner can investigate any crime as long as he or she takes detailed notes
and follows the appropriate processes. - (answer)False.
________ is the standard investigative model used by the FBI when conducting investigations
against major criminal organizations. - (answer)Enterprise Theory of Investigation (ETI).
Forensic readiness includes technical and nontechnical actions that maximize an organization's
competence to use digital evidence. - (answer)True.
Which of the following is the process of developing a strategy to address the occurrence of any
security breach in the system or network? - (answer)Incident Response.
Digital devices store data about session such as user and type of connection. - (answer)True.
Codes of ethics are the principles stated to describe the expected behavior of an investigator
while handling a case. Which of the following is NOT a principle that a computer forensic
investigator must follow? - (answer)Provide personal or prejudiced opinions.
, What must an investigator do in order to offer a good report to a court of law and ease the
prosecution? - (answer)Preserve the evidence.
What is the role of an expert witness? - (answer)To educate the public and court.
Which of the following is NOT a legitimate authorizer of a search warrant? - (answer)First
Responder.
Under which of the following circumstances has a court of law allowed investigators to perform
searches without a warrant? - (answer)Delay in obtaining a warrant may lead to the destruction
of evidence and hamper the investigation process.
Which of the following should be considered before planning and evaluating the budget for the
forensic investigation case? - (answer)Breakdown of costs into daily and annual expenditure.
Which of the following should be physical location and structural design considerations for
forensics labs? - (answer)Lab exteriors should have no windows.
Which of the following should be work area considerations for forensics labs? -
(answer)Examiner station has an area of about 50-63 square feet.
Which of the following is NOT part of the Computer Forensics Investigation Methodology? -
(answer)Testify as an expert defendant.
Which of the following is NOT part of the Computer Forensics Investigation Methodology? -
(answer)Destroy the evidence.
Investigators can immediately take action after receiving a report of a security incident. -
(answer)False.
SOLUTIONS | 2026 LATEST UPDATED | GET A+
Which of the following is true regarding computer forensics? - (answer)Computer forensics deals
with the process of finding evidence related to a digital crime to find the culprits and initiate
legal action against them.
Which of the following is NOT a objective of computer forensics? - (answer)Document
vulnerabilities allowing further loss of intellectual property, finances, and reputation during an
attack.
Which of the following is true regarding Enterprise Theory of Investigation (ETI)? - (answer)It
adopts a holistic approach toward any criminal activity as a criminal operation rather as a single
criminal act.
Forensic readiness refers to: - (answer)An organization's ability to make optimal use of digital
evidence in a limited time period and with minimal investigation costs.
Which of the following is NOT a element of cybercrime? - (answer)Evidence smaller in size.
Which of the following is true of cybercrimes? - (answer)Investigators, with a warrant, have the
authority to forcibly seize the computing devices.
Which of the following is true of cybercrimes? - (answer)The initial reporting of the evidence is
usually informal.
Which of the following is NOT a consideration during a cybercrime investigation? -
(answer)Value or cost to the victim.
Which of the following is a user-created source of potential evidence? - (answer)Address book.
,Which of the following is a computer-created source of potential evidence? - (answer)Swap file.
Which of the following is NOT where potential evidence may be located? - (answer)Processor.
Under which of the following conditions will duplicate evidence NOT suffice? - (answer)When
original evidence is in possession of the originator.
Which of the following Federal Rules of Evidence governs proceedings in the courts of the
United States? - (answer)Rule 101.
Which of the following Federal Rules of Evidence ensures that the truth may be ascertained and
the proceedings justly determined? - (answer)Rule 102.
Which of the following Federal Rules of Evidence contains rulings on evidence? - (answer)Rule
103
Which of the following Federal Rules of Evidence states that the court shall restrict the evidence
to its proper scope and instruct the jury accordingly? - (answer)Rule 105
Which of the following refers to a set of methodological procedures and techniques to identify,
gather, preserve, extract, interpret, document, and present evidence from computing equipment
in such a manner that the discovered evidence is acceptable during a legal and/or administrative
proceeding in a court of law? - (answer)Computer Forensics.
Computer Forensics deals with the process of finding _____ related to a digital crime to find the
culprits and initiate legal action against them. - (answer)Evidence.
Minimizing the tangible and intangible losses to the organization or an individual is considered
an essential computer forensics use. - (answer)True.
,Cybercrimes can be classified into the following two types of attacks, based on the line of attack.
- (answer)Internal and External.
Espionage, theft of intellectual property, manipulation of records, and trojan horse attacks are
examples of what? - (answer)Insider attack or primary attacks.
External attacks occur when there are inadequate information-security policies and procedures. -
(answer)True.
Which type of cases involve disputes between two parties? - (answer)Civil.
A computer forensic examiner can investigate any crime as long as he or she takes detailed notes
and follows the appropriate processes. - (answer)False.
________ is the standard investigative model used by the FBI when conducting investigations
against major criminal organizations. - (answer)Enterprise Theory of Investigation (ETI).
Forensic readiness includes technical and nontechnical actions that maximize an organization's
competence to use digital evidence. - (answer)True.
Which of the following is the process of developing a strategy to address the occurrence of any
security breach in the system or network? - (answer)Incident Response.
Digital devices store data about session such as user and type of connection. - (answer)True.
Codes of ethics are the principles stated to describe the expected behavior of an investigator
while handling a case. Which of the following is NOT a principle that a computer forensic
investigator must follow? - (answer)Provide personal or prejudiced opinions.
, What must an investigator do in order to offer a good report to a court of law and ease the
prosecution? - (answer)Preserve the evidence.
What is the role of an expert witness? - (answer)To educate the public and court.
Which of the following is NOT a legitimate authorizer of a search warrant? - (answer)First
Responder.
Under which of the following circumstances has a court of law allowed investigators to perform
searches without a warrant? - (answer)Delay in obtaining a warrant may lead to the destruction
of evidence and hamper the investigation process.
Which of the following should be considered before planning and evaluating the budget for the
forensic investigation case? - (answer)Breakdown of costs into daily and annual expenditure.
Which of the following should be physical location and structural design considerations for
forensics labs? - (answer)Lab exteriors should have no windows.
Which of the following should be work area considerations for forensics labs? -
(answer)Examiner station has an area of about 50-63 square feet.
Which of the following is NOT part of the Computer Forensics Investigation Methodology? -
(answer)Testify as an expert defendant.
Which of the following is NOT part of the Computer Forensics Investigation Methodology? -
(answer)Destroy the evidence.
Investigators can immediately take action after receiving a report of a security incident. -
(answer)False.
