IT 357 Midterm Study Guide| 74 QUESTIONS| WITH COMPLETE SOLUTIONS

What does the word forensics mean? Correct Answer: The word forensics means "to bring to the court" What is forensic science? Correct Answer: The process of using scientific knowledge for collecting, analyzing, and presenting evidence to the courts. What does forensic science primarily deal with? Correct Answer: The recovery and analysis of latent evidence. What does latent mean? Correct Answer: Hidden or concealed What is computer forensics? Correct Answer: The discipline that combines law and computer science to collect and analyze data in a way that is admissible as evidence in a court of law from computer systems, networks, wireless communications, storage devices. What are 4 objectives of computer science? Correct Answer: -To recover, analyze and preserve the computer in a way the court will accept as evidence. -To identify the evidence quickly -Estimate the potential impact of the malicious activity on the victim -Figure out the intent and identity of the perpetrator What are the 5 parts of computer forensic methodology? Correct Answer: -Preservation: must preserve the integrity of the original evidence -Identification: identify evidence and its location -Extraction: extract data from the evidence -Interpretation: Analyze and interpret what you find -Documentation: document every step What are the two types of investigations? Correct Answer: Public and Private What are characteristics of a public investigation? Correct Answer: What are characteristics of a private investigation? Correct Answer: What is a crime? Correct Answer: -An offensive act against society that violates a law and is punishable by the government. -Must violate at least one criminal law