BFOR EXAM WITH COMPLETE SOLUTIONS 100% VERIFIED
forensic - ANSWER The use or application of scientific knowledge to a point of law,
especially as it applies to the investigation of crime
Computer Forensics - ANSWER A sub-discipline of Digital & Multimedia Evidence, which
involves the scientific examination, analysis and/or evaluation of digital evidence in legal
matters.
Acquisition - ANSWER A process by which digital evidence is duplicated, copied or
imaged
Original Evidence - ANSWER Physical items and the data objects that are associated
with those items at the time of the seizure
Examination - ANSWER Technical Review that makes the evidence visible and suitable
for analysis; tests performed on the evidence to determine the presence or absence of
specific data.
Data Extraction - ANSWER A process that identifies and recovers information that may
not be immediately apparent.
Analysis - ANSWER To look at the results of an examination for its significance and
probative value to the case
Data Analysis - ANSWER The assessment of the information contained within the media
Chain of Custody - ANSWER The chronological documentation of the movement,
location and possession of evidence
, File Slack - ANSWER Space between the logical end of the file and the end of the last
allocation unit for that file. (NIJ) The data between the logical end of the file and the end
of the last storage unit.
Free Space - ANSWER Data storage areas available for use by the computer. The area
may already contain previously stored information. Also referred to as Unallocated
Space.
Unallocated Space - ANSWER Allocation units not assigned to active files within a file
system. (NIJ) Data storage units available for use by the computer. The area may
already contain previously stored information
3 levels of entities - ANSWER • International Association of Computer Investigative
Specialists (IACIS)
• Auditing ensures proper enforcing of policies
• A disaster recovery plan- ensures that you can restore your workstation and
investigation files to their original condition(searching for evidence)
Recover from catastrophic situations, virus contamination, and reconfigurations
The Federal Rules of Evidence - ANSWER (FRE) was created to ensure consistency in
federal proceedings(every federal court has the same rules)
The Fourth Amendment - ANSWER to the U.S. Constitution protects everyone's right to
be secure from search and seizure
Public-sector investigations - ANSWER involve government agencies responsible for
criminal investigations and prosecution
First Responder - ANSWER Responds to an incident/crime scene, assesses the situation
and takes precautions to identify and preserve physical evidence.
Digital Evidence First Responder - ANSWER Arrives on an incident/crime scene,
forensic - ANSWER The use or application of scientific knowledge to a point of law,
especially as it applies to the investigation of crime
Computer Forensics - ANSWER A sub-discipline of Digital & Multimedia Evidence, which
involves the scientific examination, analysis and/or evaluation of digital evidence in legal
matters.
Acquisition - ANSWER A process by which digital evidence is duplicated, copied or
imaged
Original Evidence - ANSWER Physical items and the data objects that are associated
with those items at the time of the seizure
Examination - ANSWER Technical Review that makes the evidence visible and suitable
for analysis; tests performed on the evidence to determine the presence or absence of
specific data.
Data Extraction - ANSWER A process that identifies and recovers information that may
not be immediately apparent.
Analysis - ANSWER To look at the results of an examination for its significance and
probative value to the case
Data Analysis - ANSWER The assessment of the information contained within the media
Chain of Custody - ANSWER The chronological documentation of the movement,
location and possession of evidence
, File Slack - ANSWER Space between the logical end of the file and the end of the last
allocation unit for that file. (NIJ) The data between the logical end of the file and the end
of the last storage unit.
Free Space - ANSWER Data storage areas available for use by the computer. The area
may already contain previously stored information. Also referred to as Unallocated
Space.
Unallocated Space - ANSWER Allocation units not assigned to active files within a file
system. (NIJ) Data storage units available for use by the computer. The area may
already contain previously stored information
3 levels of entities - ANSWER • International Association of Computer Investigative
Specialists (IACIS)
• Auditing ensures proper enforcing of policies
• A disaster recovery plan- ensures that you can restore your workstation and
investigation files to their original condition(searching for evidence)
Recover from catastrophic situations, virus contamination, and reconfigurations
The Federal Rules of Evidence - ANSWER (FRE) was created to ensure consistency in
federal proceedings(every federal court has the same rules)
The Fourth Amendment - ANSWER to the U.S. Constitution protects everyone's right to
be secure from search and seizure
Public-sector investigations - ANSWER involve government agencies responsible for
criminal investigations and prosecution
First Responder - ANSWER Responds to an incident/crime scene, assesses the situation
and takes precautions to identify and preserve physical evidence.
Digital Evidence First Responder - ANSWER Arrives on an incident/crime scene,
