Digital Evidence Exam Questions
Course Introduction
Digital Evidence explores the identification, collection, preservation, analysis, and presentation of electronic data critical to civil and criminal investigations. The course covers legal, technical, and procedural aspects of digital evidence, including the fundamentals of computer forensics, handling and securing data from various devices, and understanding chain of custody. Students will examine relevant laws, standards, and best practices for ensuring the integrity and admissibility of digital evidence in court, as well as current challenges posed by rapidly evolving technologies and encryption. Through practical exercises and case studies, learners will develop essential skills for working with digital evidence in real-world scenarios.
Recommended Textbook
Computer Forensics and Cyber Crime An Introduction 3rd Edition by Marjie T. Britz
Available Study Resources on Quizplus
13 Chapters
807 Verified Questions
807 Flashcards
Source URL: https://quizplus.com/study-set/684 Page 2
Chapter 1: Introduction and Overview of Computer
Forensics and Cybercrime
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/13159
Sample Questions
Q1) Assess the problem of lack of resources for the law enforcement community.How, in your opinion, should they respond to this problem?
Answer: The answer should include the following points:
Financial assistance needed for:
-Training
-Personnel, hardware, housing
-Acquisition of appropriate equipment
-Updating and upgrading
-Creation of computer laboratory
Q2) Which of the following is NOT a payment mechanism that poses a problem for law enforcement?
A) prepaid cards
B) banker's drafts
C) mobile payments
D) electronic purses
Answer: B
Q3) Cyberspace is the indefinite place where individuals transact and communicate.
A)True
B)False
Answer: True
Page 3
To view all questions and flashcards with answers, click on the resource link above.
Chapter 2: Computer Terminology and History
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/13160
Sample Questions
Q1) The ________ is a piece of software that runs user applications and provides an interface to the hardware.
Answer: operating system
Q2) What is the purpose of random access memory in the computer system?
A) to store easily accessible information permanently
B) to transfer several bits of data simultaneously
C) to monitor data usage
D) to temporarily store information
Answer: D
Q3) Which of the following interprets program instructions and processes data in the computer?
A) universal serial bus
B) central processing unit
C) random access memory
D) graphical user interface
Answer: B
Q4) ________ is a term used to designate "good" hackers.
Answer: White hat hackers
Q5) The ________ is the heart of the UNIX operating system.
Answer: kernel
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Traditional Computer Crime: Early Hackers and
Theft of Components
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/13161
Sample Questions
Q1) What is the primary reason that the resale of integrated chips is so lucrative?
A) increase of legitimate global marketplaces
B) ease in manipulation
C) magnitude of computer transactions
D) the basic law of supply and demand
Answer: D
Q2) Which of the following groups does NOT figure in the multilateral film privacy strategy of the Chinese Triads?
A) privacy pressers
B) hacktivists
C) piracy burners
D) runners
Answer: B
Q3) The term "hacking" was introduced at MIT in the 1980s.
A)True
B)False
Answer: False
Q4) ________ sites enable visitors to download software illegally in violation of copyright protections.
Answer: WareZ
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Contemporary Computer Crime
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/13162
Sample Questions
Q1) Which of the following refers to stalkers who are delusional and believe that their victim is in love with them or has had a previous relationship with them?
A) obsessional stalkers
B) love-obsession stalkers
C) erotomaniacs
D) vengeance stalker
Q2) At the dawn of the computer age, the term "computer crime" usually referred to the theft of computers or computer components.
A)True
B)False
Q3) ________ may be defined as the willful, malicious, and repeated following and/ or harassing of another person in an effort to inflict or cause fear of actual harm through words or deeds.
Q4) The Macro Era of computer viruses was largely characterized by infection of DOS machines spread by removable media.
A)True
B)False
Q5) The sale of stolen goods through technological means is known as ________.
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Identity Theft and Identity Fraud
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/13163
Sample Questions
Q1) Which of the following is NOT a category of phishing attacks?
A) redirectors
B) pharming
C) botnets
D) spoofing
Q2) Assess the virtual or Internet-facilitated methods by which computer criminals steal an identity.Elaborate with examples of your own.
Q3) Which of the following types of fraud is most likely to involve faked work permits and green cards?
A) insurance fraud
B) identity fraud
C) computer fraud
D) immigration fraud
Q4) Identity fraud is committed when a credible identity is created by accessing others' credit cards, financial or employment records, or computer system.
A)True
B)False
Q5) Passports, birth certificates, and social security cards are all examples of ________ documents.
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Terrorism and Organized Crime
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/13164
Sample Questions
Q1) Theorists argue that terrorism may be characterized as theater in which the audience is far more important than the actors.
A)True
B)False
Q2) Which of the following refers to the illegal duplication of credit cards achieved by running the card through a reader that captures information stored in the magnetic strip on the back?
A) skimming
B) hacking
C) spamming
D) carding
Q3) Which social network has become a popular site for online communities of al Qaeda sympathizers?
A) Facebook
B) MySpace
C) Tumbler
D) Orkut
Q4) Explain the difference between the traditional and contemporary methods used by organized crime groups.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Avenues for Prosecution and Government Efforts
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/13165
Sample Questions
Q1) How does the Virtual Global Taskforce attempt to prevent sexual exploitation of children through its Operation Pin initiative?
A) It authorizes electronic eavesdropping on any male aged 18 to 54 who visits the Innocent Images Web site.
B) It implements computer surveillance on anyone who travels more than twice a year to prominent sex-tourism countries such as Thailand.
C) It provides child porn Web sites with advanced computer-assisted technology that transforms real photos of child porn into virtual images.
D) It hosts a phony child porn Web site and forwards to appropriate authorities the identity of anyone who attempts to download images.
Q2) The Terrorist Surveillance Program requires review and reauthorization of a surveillance every ________ days.
A) 60
B) 30
C) 90
D) 45
Q3) ________ was the communication medium of choice for early computer criminals.
To view all questions and flashcards with answers, click on the resource link above.
9
Chapter 8: Applying the First Amendment to Computer-Related Crime
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/13166
Sample Questions
Q1) Which Act was struck down as the Court observed that both teenage sexual activity and the sexual abuse of children had inspired countless literary works, including that of William Shakespeare and contemporary movies?
A) Child Protection Restoration and Penalties Enhancement Act
B) Child Sexual Abuse and Pornography Act
C) Child Protection Act
D) Child Pornography Prevention Act
Q2) Which of the following did NOT uphold the constitutionality of the Child Pornography Prevention Act?
A) the First Circuit
B) the Ninth Circuit
C) the Eleventh Circuit
D) the Fourth Circuit
Q3) The Court held in Sable Communications, Inc.v.FCC and Turner Broadcasting System, Inc.v.FCC that telephone communications and cable broadcasts are entitled to the same level of First Amendment protection.
A)True
B)False
Q4) Summarize the traditional attempts to criminalize child pornography.
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: The Fourth Amendment and Other Legal Issues
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/13167
Sample Questions
Q1) Prior to the passage of the Patriot Act, law enforcement had access to stored wire communications but not stored electronic communications.
A)True
B)False
Q2) Which of the following cautioned investigators to obtain secondary warrants when specified and unspecified documents were seized wholesale, and specifically ruled that further approval of a magistrate is necessary?
A) Weeks v. U.S.
B) U.S. v. Lyons
C) Art Galleries-Hawaii, Inc. v. U.S.
D) U.S. v. Tamura
Q3) Consent for warrantless searches may be given by a third party if that third party has a shared interest or authority over the equipment.
A)True
B)False
Q4) The ________ Act extended provisions originally found in Title III of the Omnibus Crime Control and Safe Streets Act of 1968 to include nonaural electronic communications, including electronic mail.
To view all questions and flashcards with answers, click on the resource link above.
Chapter 10: Computer Forensics: Terminology and Requirements
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/13168
Sample Questions
Q1) The smallest forms of data storage are represented by binary digits.
A)True
B)False
Q2) A ________ is the number of bytes that represent about one-half page of text.
Q3) Which of the following programs extends decryption capabilities beyond a single computer by using the distributed power of multiple computers across a network to decrypt files and recover passwords?
A) Password Recovery Toolkit
B) FTK Imager
C) Distributed Network Attack
D) Registry Viewer
Q4) Discuss the development within mobile device forensic tools and suggest issues that need to be addressed to improve them.
Q5) Define firmware.Describe the boot up sequence of a computer with particular reference to the BIOS found in IBM-compatible personal computers.
Q6) Explain how over-reliance on automated programs and self-proclaimed experts pose a problem in computer investigations.How can this problem be overcome?
Q7) ________ is the fear of new technology.
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Searching and Seizing Computer-Related Evidence
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/13169
Sample Questions
Q1) Extra attention by investigators to the configuration of computer equipment, including connections, and the back of the computer serves the following purposes EXCEPT ________.
A) enabling investigators to fully document to the court the manner in which the scene was processed
B) serving as a refresher for investigators called to testify months or years after the fact
C) enabling investigators to duplicate the original state of the computer in court
D) enabling investigators to apply for a no-knock warrant
Q2) ________ ensure data integrity, preventing intentional or accidental manipulation of data.
A) Recovery tools
B) Wiping programs
C) Locking programs
D) Fuzzy logic tools
Q3) What steps must be taken to protect computer evidence from getting destroyed, contaminated, or corrupted?
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Processing of Evidence and Report Preparation
Available Study Resources on Quizplus for this Chatper
60 Verified Questions
60 Flashcards
Source URL: https://quizplus.com/quiz/13170
Sample Questions
Q1) ________ the CMOS involves the manipulation of hardware in which the password is cleared after the jumper has been reset.
Q2) According to popular science Web sites, the process of digital forensics normally starts with a hypothesis that forms into a question.
A)True
B)False
Q3) ________ is a mechanism that prevents the destruction, contamination, or corruption of original media and that can be accomplished with many of the popular imaging programs, disk management software, or simple DOS commands.
A) Jumping
B) AUTOEXEC.BAT
C) CONFIG.SYS
D) Write-blocking
Q4) Briefly discuss some basic strategies for circumventing CMOS passwords.
Q5) ________ contains the precise location of the satellite and the locations of all other satellites in the system.
Q6) Discuss some of the ways to recover passwords.Why do you think they are important to forensic investigation?
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Conclusions and Future Issues
Available Study Resources on Quizplus for this Chatper
58 Verified Questions
58 Flashcards
Source URL: https://quizplus.com/quiz/13171
Sample Questions
Q1) Which of the following statements is considered true regarding the development of computer-specific legislation?
A) It should ensure uniformity in application and interpretation within a selected jurisdiction.
B) It must be applicable to traditional problems, not to advanced technology.
C) It must be applicable to tomorrow's technology, not to traditional problems.
D) It should ensure uniformity in application and interpretation irrespective of jurisdictional climate.
Q2) Law enforcement authorities can tap into traditional telephonic exchanges more easily than into wireless communications.
A)True
B)False
Q3) ________ is the analysis of large data sets aimed at discovering patterns and relationships.
Q4) The increase of remote data storage facilities is conducive to the efforts of law enforcement authorities.
A)True
B)False
Q5) ________ statutes require businesses to assure the identity of their customers.
To view all questions and flashcards with answers, click on the resource link above. Page 15