27/11/2024 11:35AM
BFOR 201 Midterm Exam Questions and
Answers
Forensics - Answers✓✓Application of scientific knowledge to crime investigation
Computer Forensics - Answers✓✓Examination, analysis, and evaluation of digital evidence
Acquisition - Answers✓✓Duplication, copying, and imaging of digital evidence
Original Evidence - Answers✓✓Physical/data items seized
Examination - Answers✓✓Technical review making evidence visible & suitable for analysis,
determine presence/absence of specific data
Data Extraction - Answers✓✓Process of identifying & recovering info. not immediately
apparent
Analysis - Answers✓✓Evaluating significance & probative value of exam. results
Data Analysis - Answers✓✓Assessment of info contained within the media
Digital Evidence - Answers✓✓Information of probative value, stored or transmitted in binary
form
, ©Themoon EXAM SOLUTIONS
27/11/2024 11:35AM
Chain of Custody - Answers✓✓Chronological documentation of movement, location, and
possession of evidence
Basic Input Output System (BIOS) - Answers✓✓Set of routines stored in read-only memory
that enables the computer to start the operating system and to communicate the with the various
devices in the system
Archiving - Answers✓✓Data storage process ideal for long term availability/retrieval
File Slack - Answers✓✓Data between logical end of the file and end of the last storage unit
Free Space - Answers✓✓Available storage area; may contain previously stored information
Unallocated Space - Answers✓✓The same as free space; Allocation units not assigned to active
files within file system
digital forensics lab - Answers✓✓where you conduct your investigation
store evidence
house your equipment, hardware, software
includes permanent, temporary, and mobile facilities
include all personnel
ISO 17025 - Answers✓✓international lab standards
, ©Themoon EXAM SOLUTIONS
27/11/2024 11:35AM
American Society of Crime Lab Directors- Lab Accreditation Board (ASCLD-LAB) -
Answers✓✓Offers standards and recommendations for
managing a lab through effective quality management
acquiring an official certification/accreditation
auditing lab function and procedures
criminal justice labs only (private and public)
Scientific Working Group on Digital Evidence (SWGDE) - Answers✓✓Offers standards and
recommendations as a supplemental or alternative to ASCLD/LAB.
Lab Budget Planning - Answers✓✓estimate the number of computer cases your lab expects to
examine
take into account changes in technology
use statistics to determine what kind of computer crimes are more likely to occur
use this info to plan ahead your lab requirements and costs
acquiring certification and training - Answers✓✓update your skills through appropriate training
(thoroughly research the requirements, costs, and acceptability in your area of employment)
international association of computer investigative specialists (IACIS) - Answers✓✓created by
police officers who wanted to formalize credentials in computing investigations
ISC^2 Certified Cyber Forensics Professional (CCFP) - Answers✓✓requires knowledge of:
digital forensics
malware analysis