VIEW AHEAD QUESTIONS AND ANSWERS
GRADED A+
●● An employee is suspected of stealing corporate secrets by
downloading files onto his employer's desktop computer, copying the
files to a thumb drive, and then taking the thumb drive home.
What is the most effective method to determine whether the employee is
stealing?
A. Interview the employee.
B. Examine the corporate firewall logs.
c. Collection and examine the corporate desktop with forensics software.
D. Export the mailbox and review the employee's email.. Answer: C
●● Your corporate client's IT department seeks to recover storage space
from its computer servers including a file share where the finance team
stores weekly, monthly, quarterly reports.
Which of the following is the least important factor in determining
whether the file share can be deleted?
A. The file share can only be written to by the report writer for the
Finance Department which never adds new reports or changes the
reports' formats
, B. Finance reports are generated from a central system whose data are
retained permanently
C. The corporate Finance Department does not have "write" access to
the finance share
D. The finance reports are in PDF, an easily shared format.. Answer: D
●● As a paralegal in the legal department, you have been asked to
arrange for the contents of 30 desktops and 2 servers to be uploaded to a
particular litigation support review platform.
Before starting to collect the data, what is the first thing you should do?
A. Make sure the transfer media is purged of any data
B. Call and make an appointment with each custodian
C. Investigate the matter's legal issues and prospectively relevant facts to
help thoughtfully focus the scope of the data inventory and accumulation
D. Arrange to exclude from the uploading process all software system
files. Answer: C
●● You are responsible for supervising the production of responsive,
unprivileged documents to the requesting party. But you are called out of
town before the review is complete.
You should: