AWR 139 W DIGITAL FORENSICS
AWR-139-W Digital Forensics
Question 1
Correct
1.00 points out of 1.00
Flag question
Question text
In public investigations in which a crime has been
committed, exculpatory evidence for a suspect will ________.
Select one:
a. Exclude any explanation other than the current theory of
events.
b. Have no effect on the suspect since exculpatory evidence
relates to theories of events.
c. Prove the guilt of the suspect.
d. Clear or exonerate the suspect.
Question 2
Correct
1.00 points out of 1.00
Flag question
Question text
Which one of the following strategies would NOT help
identify evidence relevant to a specific case?
, Select one:
a. Identify and exclude files that are common to all Windows
installations.
b. Exclude files that have not been modified.
c. Identify the file types that are highly probable to contain
inculpatory or exculpatory evidence.
d. Exclude files that are known to be irrelevant (such as files
with well-known signatures).
Question 3
Incorrect
0.00 points out of 1.00
Flag question
Question text
Which of the following are good reasons why certification is
more important early in the career of forensics
investigators?
Select one or more:
a. Forensics software is too advanced for younger staff, and
so requires more training and validation of skills.
b. Senior investigators are required to have at least
a minimal level of education and certifications.
c. Certification prompts education and training of
inexperienced staff.
d. The legal system often requests/requires validation of
forensics investigators' skill(s).
Question 4
AWR-139-W Digital Forensics
Question 1
Correct
1.00 points out of 1.00
Flag question
Question text
In public investigations in which a crime has been
committed, exculpatory evidence for a suspect will ________.
Select one:
a. Exclude any explanation other than the current theory of
events.
b. Have no effect on the suspect since exculpatory evidence
relates to theories of events.
c. Prove the guilt of the suspect.
d. Clear or exonerate the suspect.
Question 2
Correct
1.00 points out of 1.00
Flag question
Question text
Which one of the following strategies would NOT help
identify evidence relevant to a specific case?
, Select one:
a. Identify and exclude files that are common to all Windows
installations.
b. Exclude files that have not been modified.
c. Identify the file types that are highly probable to contain
inculpatory or exculpatory evidence.
d. Exclude files that are known to be irrelevant (such as files
with well-known signatures).
Question 3
Incorrect
0.00 points out of 1.00
Flag question
Question text
Which of the following are good reasons why certification is
more important early in the career of forensics
investigators?
Select one or more:
a. Forensics software is too advanced for younger staff, and
so requires more training and validation of skills.
b. Senior investigators are required to have at least
a minimal level of education and certifications.
c. Certification prompts education and training of
inexperienced staff.
d. The legal system often requests/requires validation of
forensics investigators' skill(s).
Question 4
