Chapter 1 Digital Forensic Questions and Answers Latest Update
2027
Question 1.
What do you call a list of people who have had physical possession of the evidence? Chain
of custody Affidavit Evidence log Evidence record
Correct Answer: Chain of custody
Question 2.
T or F Embezzlement is a type of digital investigation typically conducted in a business
environment.
Correct Answer: True
Question 3.
T or F You shouldn't include a narrative of what steps you took in your case report
Correct Answer: False
Question 4.
What's the purpose of an affidavit? To specify who, what, when, and where—that is,
specifics on place, time, items being searched for, and so forth. To list problems that might
happen when conducting an investigation. To provide facts in support of evidence of a
crime to submit to a judge when requesting a search warrant. To determine the OS of the
suspect computer and list the software needed for the examination.
Correct Answer: To provide facts in support of evidence of a crime to submit to a
judge when requesting a search warrant
Question 5.
T or F Under normal circumstances, a private-sector investigator is considered an agent of
law enforcement.
Correct Answer: False
Question 6.
Why should evidence media be write-protected? To make image files smaller in size To
make sure data isn't altered To comply with Industry standards To speed up the imaging
process
Correct Answer: To make sure data isn't altered
2027
Question 1.
What do you call a list of people who have had physical possession of the evidence? Chain
of custody Affidavit Evidence log Evidence record
Correct Answer: Chain of custody
Question 2.
T or F Embezzlement is a type of digital investigation typically conducted in a business
environment.
Correct Answer: True
Question 3.
T or F You shouldn't include a narrative of what steps you took in your case report
Correct Answer: False
Question 4.
What's the purpose of an affidavit? To specify who, what, when, and where—that is,
specifics on place, time, items being searched for, and so forth. To list problems that might
happen when conducting an investigation. To provide facts in support of evidence of a
crime to submit to a judge when requesting a search warrant. To determine the OS of the
suspect computer and list the software needed for the examination.
Correct Answer: To provide facts in support of evidence of a crime to submit to a
judge when requesting a search warrant
Question 5.
T or F Under normal circumstances, a private-sector investigator is considered an agent of
law enforcement.
Correct Answer: False
Question 6.
Why should evidence media be write-protected? To make image files smaller in size To
make sure data isn't altered To comply with Industry standards To speed up the imaging
process
Correct Answer: To make sure data isn't altered
