Chapter 1 Digital Forensics Questions and Answers – 100% Solved
A warning banner should never state that the organization has the right to monitor what users
do. - ✔✔✔-False
Digital forensics and data recovery refer to the same activities. - ✔✔✔-False
List three items that should be on an evidence custody form. - ✔✔✔-Case number, name of the
investigator and nature of the case
Police in the United States must use procedures that adhere to which of the following? - ✔✔✔-
Fourth Amendment
Policies can address rules for which of the following?
When you can log on to a company network from home
The amount of personal e-mail you can send
The Internet sites you can or can't access
Any of the above - ✔✔✔-Any of the above
T or F Data collected before an attorney issues a memo for an attorney-client privilege case is
protected under the confidential work product rule. - ✔✔✔-False
T or F Embezzlement is a type of digital investigation typically conducted in a business
environment. - ✔✔✔-True
T or F For digital evidence, an evidence bag is typically made of antistatic material. - ✔✔✔-True
T or F One way to determine the resources needed for an investigation is based on the OS of the
suspect computer, list the software needed for the examination. - ✔✔✔-True
A warning banner should never state that the organization has the right to monitor what users
do. - ✔✔✔-False
Digital forensics and data recovery refer to the same activities. - ✔✔✔-False
List three items that should be on an evidence custody form. - ✔✔✔-Case number, name of the
investigator and nature of the case
Police in the United States must use procedures that adhere to which of the following? - ✔✔✔-
Fourth Amendment
Policies can address rules for which of the following?
When you can log on to a company network from home
The amount of personal e-mail you can send
The Internet sites you can or can't access
Any of the above - ✔✔✔-Any of the above
T or F Data collected before an attorney issues a memo for an attorney-client privilege case is
protected under the confidential work product rule. - ✔✔✔-False
T or F Embezzlement is a type of digital investigation typically conducted in a business
environment. - ✔✔✔-True
T or F For digital evidence, an evidence bag is typically made of antistatic material. - ✔✔✔-True
T or F One way to determine the resources needed for an investigation is based on the OS of the
suspect computer, list the software needed for the examination. - ✔✔✔-True
