COMPUTER FORENSICS AND
INVESTIGATIONS UPDATED ACTUAL
QUESTIONS AND CORRECT ANSWERS
COMPLETE STUDY GUIDE FULL SOLUTION
●● Police in the United States must use procedures that adhere to which
of the following?
Answer: Fourth Amendment
●● The triad of computing security includes which of the following?
Answer: Vulnerability/threat assessment and risk management, network
intrusion detection and incident response, and digital investigation
●● What's the purpose of maintaining a network of digital forensics
specialists?
Answer: To have the option of calling on a specialist to help with a case
you cannot solve
●● "Policies can address rules for which of the following?
a. When you can log on to a company network from home
b. The Internet sites you can or can't access
c. The amount of personal e-mail you can send
d. Any of the above"
,Answer: Any of the above
●● List two items that should appear on a warning banner
Answer: Access to this system and network is restricted and use of this
system and network is for official business only.
●● Under normal circumstances, a private-sector investigator is
considered an agent of law enforcement. True or False?
Answer: FALSE
●● List two types of digital investigations typically conducted in a
business environment
Answer: Email Abuse, and Internet Abuse
●● What is professional conduct, and why is it important?
Answer: Behavior expected of an employee in the workplace or other
professional setting. It is important because it determines your
credibility
●● "What's the purpose of an affidavit?
"
Answer: Affidavit is often used to justify issuing a warrant or to deal
with abuse in a corporation.
, ●● What are the necessary components of a search warrant?
Answer: You need an affidavit of the evidence to conduct an
investigation
●● What are some ways to determine the resources needed for an
investigation?
Answer: Determine the OS of the suspect computer & list the software
to use for the examination
●● List three items that should be on an evidence custody form
Answer: Case number, Investigating organization, Investigator
●● Why should you do a standard risk assessment to prepare for an
investigation?
Answer: You do a standard risk assessment to understand the risks that
could halt to investigation
●● You should always prove the allegations made by the person who
hired you. True or False?
Answer: FALSE
●● For digital evidence, an evidence bag is typically made of antistatic
material. True or False?
Answer: TRUE
INVESTIGATIONS UPDATED ACTUAL
QUESTIONS AND CORRECT ANSWERS
COMPLETE STUDY GUIDE FULL SOLUTION
●● Police in the United States must use procedures that adhere to which
of the following?
Answer: Fourth Amendment
●● The triad of computing security includes which of the following?
Answer: Vulnerability/threat assessment and risk management, network
intrusion detection and incident response, and digital investigation
●● What's the purpose of maintaining a network of digital forensics
specialists?
Answer: To have the option of calling on a specialist to help with a case
you cannot solve
●● "Policies can address rules for which of the following?
a. When you can log on to a company network from home
b. The Internet sites you can or can't access
c. The amount of personal e-mail you can send
d. Any of the above"
,Answer: Any of the above
●● List two items that should appear on a warning banner
Answer: Access to this system and network is restricted and use of this
system and network is for official business only.
●● Under normal circumstances, a private-sector investigator is
considered an agent of law enforcement. True or False?
Answer: FALSE
●● List two types of digital investigations typically conducted in a
business environment
Answer: Email Abuse, and Internet Abuse
●● What is professional conduct, and why is it important?
Answer: Behavior expected of an employee in the workplace or other
professional setting. It is important because it determines your
credibility
●● "What's the purpose of an affidavit?
"
Answer: Affidavit is often used to justify issuing a warrant or to deal
with abuse in a corporation.
, ●● What are the necessary components of a search warrant?
Answer: You need an affidavit of the evidence to conduct an
investigation
●● What are some ways to determine the resources needed for an
investigation?
Answer: Determine the OS of the suspect computer & list the software
to use for the examination
●● List three items that should be on an evidence custody form
Answer: Case number, Investigating organization, Investigator
●● Why should you do a standard risk assessment to prepare for an
investigation?
Answer: You do a standard risk assessment to understand the risks that
could halt to investigation
●● You should always prove the allegations made by the person who
hired you. True or False?
Answer: FALSE
●● For digital evidence, an evidence bag is typically made of antistatic
material. True or False?
Answer: TRUE
