©Themoon EXAM SOLUTIONS
27/11/2024 11:35AM
BFOR Exam Questions and Verified
Answers
forensic - Answers✓✓The use or application of scientific knowledge to a point of law,
especially as it applies to the investigation of crime
Computer Forensics - Answers✓✓A sub-discipline of Digital & Multimedia Evidence, which
involves the scientific examination, analysis and/or evaluation of digital evidence in legal
matters.
Acquisition - Answers✓✓A process by which digital evidence is duplicated, copied or imaged
Original Evidence - Answers✓✓Physical items and the data objects that are associated with
those items at the time of the seizure
Examination - Answers✓✓Technical Review that makes the evidence visible and suitable for
analysis; tests performed on the evidence to determine the presence or absence of specific data.
Data Extraction - Answers✓✓A process that identifies and recovers information that may not
be immediately apparent.
Analysis - Answers✓✓To look at the results of an examination for its significance and
probative value to the case
, ©Themoon EXAM SOLUTIONS
27/11/2024 11:35AM
Data Analysis - Answers✓✓The assessment of the information contained within the media
Chain of Custody - Answers✓✓The chronological documentation of the movement, location
and possession of evidence
File Slack - Answers✓✓Space between the logical end of the file and the end of the last
allocation unit for that file. (NIJ) The data between the logical end of the file and the end of the
last storage unit.
Free Space - Answers✓✓Data storage areas available for use by the computer. The area may
already contain previously stored information. Also referred to as Unallocated Space.
Unallocated Space - Answers✓✓Allocation units not assigned to active files within a file
system. (NIJ) Data storage units available for use by the computer. The area may already
contain previously stored information
3 levels of entities - Answers✓✓• International Association of Computer Investigative
Specialists (IACIS)
• Auditing ensures proper enforcing of policies
• A disaster recovery plan- ensures that you can restore your workstation and investigation files
to their original condition(searching for evidence)
Recover from catastrophic situations, virus contamination, and reconfigurations
The Federal Rules of Evidence - Answers✓✓(FRE) was created to ensure consistency in
federal proceedings(every federal court has the same rules)
27/11/2024 11:35AM
BFOR Exam Questions and Verified
Answers
forensic - Answers✓✓The use or application of scientific knowledge to a point of law,
especially as it applies to the investigation of crime
Computer Forensics - Answers✓✓A sub-discipline of Digital & Multimedia Evidence, which
involves the scientific examination, analysis and/or evaluation of digital evidence in legal
matters.
Acquisition - Answers✓✓A process by which digital evidence is duplicated, copied or imaged
Original Evidence - Answers✓✓Physical items and the data objects that are associated with
those items at the time of the seizure
Examination - Answers✓✓Technical Review that makes the evidence visible and suitable for
analysis; tests performed on the evidence to determine the presence or absence of specific data.
Data Extraction - Answers✓✓A process that identifies and recovers information that may not
be immediately apparent.
Analysis - Answers✓✓To look at the results of an examination for its significance and
probative value to the case
, ©Themoon EXAM SOLUTIONS
27/11/2024 11:35AM
Data Analysis - Answers✓✓The assessment of the information contained within the media
Chain of Custody - Answers✓✓The chronological documentation of the movement, location
and possession of evidence
File Slack - Answers✓✓Space between the logical end of the file and the end of the last
allocation unit for that file. (NIJ) The data between the logical end of the file and the end of the
last storage unit.
Free Space - Answers✓✓Data storage areas available for use by the computer. The area may
already contain previously stored information. Also referred to as Unallocated Space.
Unallocated Space - Answers✓✓Allocation units not assigned to active files within a file
system. (NIJ) Data storage units available for use by the computer. The area may already
contain previously stored information
3 levels of entities - Answers✓✓• International Association of Computer Investigative
Specialists (IACIS)
• Auditing ensures proper enforcing of policies
• A disaster recovery plan- ensures that you can restore your workstation and investigation files
to their original condition(searching for evidence)
Recover from catastrophic situations, virus contamination, and reconfigurations
The Federal Rules of Evidence - Answers✓✓(FRE) was created to ensure consistency in
federal proceedings(every federal court has the same rules)
