BESTLEC
Test Bank
Digital Archaeology: The Art and Science of Digital Forensics, 1st Ed.
by Michael Graves.
All Chapters| Latest Edition
C
LE
ST
BE
, BESTLEC
Answers Marked with an asterisk (*)
1. In Eoghan Casey’s model of an investigation there are multiple steps. Which of these is
not one of those steps?
a. Examination
*b. Interrogation
c. Identification/Assessment
d. Preservation
e. Reporting
C
2.
LE
The process of documentation begins in the Identification/Assessment phase.
ST
*a. True
b. False
BE
3. Which of the following would not likely be a stakeholder in a civil lawsuit against a
major automobile manufacturer?
a. Government regulatory agencies
b. The United Autoworkers Union
c. The judge assigned to the case
d. Owners of that company’s products
*e. All of these would be interested parties.
, BESTLEC
4. Collecting exculpatory evidence is exclusively the responsibility of the defense counsel.
a. True
*b. False
5. How many steps are there in Eoghan Casey’s Investigation Model?
Correct Answer(s):
a. 6
C
b. six
c.
d.
six.
6.
LE
ST
6. Bob Smith is suspected of using his company’s Internet facilities as a conduit for sending
large quantities of SPAM to millions of users. You are called in to examine his computer to see if
BE
there is evidence to support this claim. This is initially a form of what type of investigation?
a. Civil
*b. Internal
c. Criminal
d. This is not something you would do.
7. You suspect that there are a number of deleted files that can still be salvaged in the
unallocated space of a drive image. During which phase of the investigation would you use a
data carving utility?
, BESTLEC
*a. Examination
b. Acquisition
c. Identification/Assessment
d. Analysis
e. Reporting
8. During which phase of an investigation do you make your first entries into a chain of
custody log?
a. Examination
*b. Acquisition
C
c. Identification/Assessment
d. Analysis
LE
e. Reporting
ST
9. Criminal cases have more stringent evidence-gathering requirements because .
BE
a. Only civil cases fall under constitutional guidelines.
b. Criminal cases are generally handled by Federal judges.
*c. The Constitution protects the rights of citizens being tried in criminal proceedings.
d. Civil cases do not involve jail time or possible capital punishment.
e. They don’t. Civil cases have the most stringent requirements.
10. A person has been sued by her neighbor for building a fence on the wrong side of the
property line. She tries to act as her own defense attorney and is battered in court. She can appeal
the case on Constitutional grounds, since she was never advised of her right to be represented by
counsel.
Test Bank
Digital Archaeology: The Art and Science of Digital Forensics, 1st Ed.
by Michael Graves.
All Chapters| Latest Edition
C
LE
ST
BE
, BESTLEC
Answers Marked with an asterisk (*)
1. In Eoghan Casey’s model of an investigation there are multiple steps. Which of these is
not one of those steps?
a. Examination
*b. Interrogation
c. Identification/Assessment
d. Preservation
e. Reporting
C
2.
LE
The process of documentation begins in the Identification/Assessment phase.
ST
*a. True
b. False
BE
3. Which of the following would not likely be a stakeholder in a civil lawsuit against a
major automobile manufacturer?
a. Government regulatory agencies
b. The United Autoworkers Union
c. The judge assigned to the case
d. Owners of that company’s products
*e. All of these would be interested parties.
, BESTLEC
4. Collecting exculpatory evidence is exclusively the responsibility of the defense counsel.
a. True
*b. False
5. How many steps are there in Eoghan Casey’s Investigation Model?
Correct Answer(s):
a. 6
C
b. six
c.
d.
six.
6.
LE
ST
6. Bob Smith is suspected of using his company’s Internet facilities as a conduit for sending
large quantities of SPAM to millions of users. You are called in to examine his computer to see if
BE
there is evidence to support this claim. This is initially a form of what type of investigation?
a. Civil
*b. Internal
c. Criminal
d. This is not something you would do.
7. You suspect that there are a number of deleted files that can still be salvaged in the
unallocated space of a drive image. During which phase of the investigation would you use a
data carving utility?
, BESTLEC
*a. Examination
b. Acquisition
c. Identification/Assessment
d. Analysis
e. Reporting
8. During which phase of an investigation do you make your first entries into a chain of
custody log?
a. Examination
*b. Acquisition
C
c. Identification/Assessment
d. Analysis
LE
e. Reporting
ST
9. Criminal cases have more stringent evidence-gathering requirements because .
BE
a. Only civil cases fall under constitutional guidelines.
b. Criminal cases are generally handled by Federal judges.
*c. The Constitution protects the rights of citizens being tried in criminal proceedings.
d. Civil cases do not involve jail time or possible capital punishment.
e. They don’t. Civil cases have the most stringent requirements.
10. A person has been sued by her neighbor for building a fence on the wrong side of the
property line. She tries to act as her own defense attorney and is battered in court. She can appeal
the case on Constitutional grounds, since she was never advised of her right to be represented by
counsel.
