IT 357 Midterm Exam Review| 65 QUESTIONS| WITH COMPLETE SOLUTIONS

Forensic science Correct Answer: the process of using scientific knowledge for collecting, analyzing, and presenting evidence to the courts. deals primarily with the recovery and analysis of latent evidence Computer forensics Correct Answer: the discipline that combines elements of law and computer science to collect and analyze data in a way that is admissible as evidence in a court of law from: - Computer systems - Networks - Wireless communications - Storage devices Objectives of computer forensics Correct Answer: To recover, analyze, & preserve the computer - Must do so in a way the court will accept it as evidence! - To identify the evidence quickly - Estimate the potential impact of the malicious activity on the victim - Figure out the intent & identity of the perpetrator Computer forensics methodology Correct Answer: • Preservation - Must preserve the integrity of the original evidence • Identification - Identify evidence & its location • Extraction - Extract data from the evidence • Interpretation - Analyze and interpret what you find • Documentation - Document every step!!! "Old" Crimes Correct Answer: • Fraud and Embezzlement • Child pornography • Drug/Weapons/Human trafficking • Extortion • Piracy • Industrial Espionage "New" Crimes Correct Answer: • Rogue Programs: - Viruses - Worms - Trojan horses, etc.