VERSION REAL EXAM QUESTIONS AND CORRECT
ANSWERS / WGU C702 EXAM 400+ EXAM QUESTIONS
AND ANSWERS | VERIFIED ANSWERS||BRAND NEW
VERSION!!
Chain of Custody
ANSWERS: a written record of all people who have had possession of an item
of evidence
Rule 101: Scope
ANSWERS: These rules govern proceedings in the courts of the United
States and before United States bankruptcy judges and United States
magistrate judges, to the extent and with the exceptions stated in rule
1101.
Rule 102: Purpose and Construction
ANSWERS: These rules shall be construed to secure fairness in
administration, elimination of unjustifiable expense and delay, and
promotion of growth and development of the law of evidence to the end
that the truth may be ascertained and proceedings justly determined.
,Rule 105: Limited Admissibility
ANSWERS: When evidence that is admissible as to one party or for one
purpose but not admissible as to another party or for another purpose is
admitted, the court, upon ITProTV Video Notes for CHFI v9 request, shall
restrict the evidence to its proper scope and instruct the jury accordingly
Rule 801: Hearsay
ANSWERS: "Hearsay" means a statement that:
(1) the declarant does not make while testifying at the current trial or hearing;
and
(2) a party offers in evidence to prove the truth of the matter
asserted in the statement.
Rule 1002. Requirement of the Original
ANSWERS: An original writing, recording, or photograph is required in
order to prove its content unless these rules or a federal statute provides
otherwise.
, Rule 1003. Admissibility of Duplicates
ANSWERS: A duplicate is admissible to the same extent as the original
unless a genuine question is raised about the original's authenticity or the
circumstances make it unfair to admit the duplicate.
Rule 1004. Admissibility of Other Evidence of Content
ANSWERS: Admissibility of Other Evidence of Content
Scientific Working Group on Digital Evidence (SWGDE)
ANSWERS: brings together organizations actively engaged in the field of
digital and multimedia evidence to foster communication and cooperation
as well as to ensure quality and consistency within the forensic
community.
Computer Forensics Investigation Process
ANSWERS:
1. Pre-Investigation
2. Investigation
3. Post-Investigation
Pre-Investigation
ANSWERS: Tasks performed prior to investigation
Setting up a computer forensics lab, toolkit, and workstation
, Investiagtion
ANSWERS: Main phase in computer forensics
investigation Acquisition, preservation, and
analysis of the data
Post-Investigation
ANSWERS: Reporting and documentation of all the actions undertaken
and the findings Ensure that the target audience can easily understand
the report
Ensure report provides adequate and acceptable evidence
Computer Forensics Laboratory
ANSWERS: Work area considerations (50-63 sq. ft per
station) no windows ASCLD/Lab Accreditation
ISO/IEC 17025
Forensic Hardware Tools
ANSWERS: FRED, Paraben's StrongHold, PC-3000 Data Extractor, Paraben's
Chat Stick, RAPID IMAGE 7020 X2, RoadMASSter-3 X2, ZX-Tower, Data
Recovery Stick, Tableau T8-R2 Forensic USB Bridge
FRED
ANSWERS: Acquires data directly from hard drives and storage devices