CNIT 420 Midterm Questions and Answers Graded A

CNIT 420 Midterm Questions and Answers Graded A Problem of CSI Effect Most techniques of unrealistic or inaccurate Digital Forensics the discovery, collection, and analysis of evidence found on computers and networks Digital Forensics consists of scientific examination and analysis of the data Digital Forensics requires examination in what way? A forensically sound manner Federal Rules of Evidence (FRE) 1973, created to ensure consistency in federal proceedings Fourth Amendment The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized. Admissibility of evidence from computers and digital devices has what? different case law for every U.S. Jurisdiction What are the "w" questions? What happened? Why has it happened? Where is the data stored? Who was using the device? Where did the crime take place? What is inculpatory evidence? incriminating or providing evidence of an action What is exculpatory evidence? provides evidence of a lack of action What is the investigations triad? Vulnerability/threat assessment and risk management Network intrusion detection and incident response digital investigations When there are no statutes for a crime what is used? Case law What are 3 advantages of the raw file format fast data transfers, ignores minor data read