IT 357 Midterm| 45 QUESTIONS| WITH COMPLETE SOLUTIONS

What does forensics mean? Correct Answer: To bring to the court What is forensic science and what does it deal with? Correct Answer: The process of using scientific knowledge for collecting, analyzing, and presenting evidence to the courts. Forensic science deals primarily with the recovery and analysis of latent evidence. What does latent mean? Correct Answer: Hidden or concealed What is computer forensics? Correct Answer: The discipline that combines elements of law and computer science to collect and analyze data in a way that is admissible as evidence in a court of law from: - computer systems - networks - wireless communications - storage devices What are the four (4) objectives of computer forensics? Correct Answer: 1. To recover, analyze, & preserve the computer 2. To identify the evidence quickly 3. Estimate the potential impact of the malicious activity on the victim 4. Figure out the intent & identity of the perpetrator Describe the computer forensics methodology. Correct Answer: Preservation - must preserve the integrity of the original evidence. Identification - identify evidence & its location Extraction - extract data from the evidence Interpretation - analyze and interpret what you find Documentation - document everything T/F: Computers can be the target, the instrument, or the fruit of a crime Correct Answer: True Describe a criminal case. Correct Answer: - Brought on the by the government - Seeking to punish criminals for breaking the law - Law enforcement has authority to seize evidence by following the proper procedures - Must prove the case beyond a reasonable doubt Describe civil/tort law Correct Answer: A tort is private or civil wrong. It is an offense against an individual. - Brought on by a private party - Seeking to gain compensation for some type of damage - Do not have the authority to seize e