WGU C702 CHFI and OA QUIZ Questions and Answers
(2022) (Verified Answers)
Which of the following is true regarding computer forensics?
Computer forensics deals with the process of finding evidence related to a digital crime
to find the culprits and initiate legal action against them.
Which of the following is not an objective of computer forensics?
Document vulnerabilities allowing further loss of intellectual property, finances, and
reputation during an attack.
Which of the following is true regarding Enterprise Theory of Investigation?
It adopts a holistic approach toward any criminal activity as a criminal operation rather
than as a single criminal act.
Forensic readiness refers to:
an organization's ability to make optimal use of digital evidence in a limited time period
and with minimal investigation costs
Which of the following is NOT an element of cybercrime?
Evidence smaller in size
Which of the following is true of cybercrimes?
Investigators, with a warrant, have the authority to forcibly seize the computing devices.
Which of the following is true of civil crimes?
The initial reporting of the evidence is generally informal
Which of the following is NOT a consideration during a cyber crime
investigation?
Value or cost to the victim
Which of the following is a user created source of potential evidence?
Address book
Which of the following is a computer created source of potential evidence?
Swap file
Which of the following is NOT where potential evidence may be located?
Processor
Under which of the following conditions will duplicate evidence NOT suffice?
when original evidence is in possession of the originator
Which of the following Federal Rules of Evidence governs proceedings in the
courts of the United States?
Rule 101
Which of the following Federal Rules of Evidence ensures that the truth may be
ascertained and the proceedings justly determined?
Rule 102
Which of the following Federal Rules of Evidence contains Rulings on Evidence?
Rule 103
Which of the following Federal Rules of Evidence states that the court shall
restrict the evidence to its proper scope and instruct the jury accordingly?
Rule 105
Which of the following answers refers to a set of methodological procedures and
techniques to identify, gather, preserve, extract, interpret, document, and present
, evidence from computing equipment in such a manner that the discovered
evidence is acceptable during a legal and or administrative proceeding in a court
of law?
computer forensics
Computer forensics deals with the process of finding ___________ related to a
digital crime to find the culprits and initiate legal action against them?
evidence
Minimizing the tangible and intangible losses to the organization or an individual
is considered an essential computer forensics use (T/F)
True
Cybercrimes can be classified into the following two types of attacks, base don
the line of attack:
internal
external
Espionage, theft of intellectual property, manipulation of records, and Trojan
horse attacks are examples of what?
insider attacks or primary threats
External attacks occur when there are inadequate information-security policies
and procedures (T/F)
True
Which type of cases involve disputes between two parties?
Civil
A computer forensic examiner can investigate any crime as long as he or she
takes detailed notes and follows the appropriate processes (T/F)
False
The computer forensic examiner must not continue with the investigation if the
examination is going to be beyond his or her knowledge level or skill level. In these
circumstances, the forensic investigator must seek the assistance of an experienced
specialist investigator or undergo training in that particular field to enhance his or her
knowledge or skill set. It would be wise to discontinue with the investigation if it is going
to adversely affect the outcome of the case. For more information on this topic
see Computer Hacking Forensics Investigator Ch
_______________ is the standard investigative model used by the FBI when
conducting investigations against major criminals organizations?
Enterprise Theory of Investigaiton
Digital devices store data about sessions such as user and type of connection
(T/F)
True
Forensic readiness includes technical and non technical actions that maximize an
organizations competence to use digital evidence (T/F)
True
Which of the following is the process of developing a strategy to address the
occurrence of any security breach in the system or network?
Incident response
(2022) (Verified Answers)
Which of the following is true regarding computer forensics?
Computer forensics deals with the process of finding evidence related to a digital crime
to find the culprits and initiate legal action against them.
Which of the following is not an objective of computer forensics?
Document vulnerabilities allowing further loss of intellectual property, finances, and
reputation during an attack.
Which of the following is true regarding Enterprise Theory of Investigation?
It adopts a holistic approach toward any criminal activity as a criminal operation rather
than as a single criminal act.
Forensic readiness refers to:
an organization's ability to make optimal use of digital evidence in a limited time period
and with minimal investigation costs
Which of the following is NOT an element of cybercrime?
Evidence smaller in size
Which of the following is true of cybercrimes?
Investigators, with a warrant, have the authority to forcibly seize the computing devices.
Which of the following is true of civil crimes?
The initial reporting of the evidence is generally informal
Which of the following is NOT a consideration during a cyber crime
investigation?
Value or cost to the victim
Which of the following is a user created source of potential evidence?
Address book
Which of the following is a computer created source of potential evidence?
Swap file
Which of the following is NOT where potential evidence may be located?
Processor
Under which of the following conditions will duplicate evidence NOT suffice?
when original evidence is in possession of the originator
Which of the following Federal Rules of Evidence governs proceedings in the
courts of the United States?
Rule 101
Which of the following Federal Rules of Evidence ensures that the truth may be
ascertained and the proceedings justly determined?
Rule 102
Which of the following Federal Rules of Evidence contains Rulings on Evidence?
Rule 103
Which of the following Federal Rules of Evidence states that the court shall
restrict the evidence to its proper scope and instruct the jury accordingly?
Rule 105
Which of the following answers refers to a set of methodological procedures and
techniques to identify, gather, preserve, extract, interpret, document, and present
, evidence from computing equipment in such a manner that the discovered
evidence is acceptable during a legal and or administrative proceeding in a court
of law?
computer forensics
Computer forensics deals with the process of finding ___________ related to a
digital crime to find the culprits and initiate legal action against them?
evidence
Minimizing the tangible and intangible losses to the organization or an individual
is considered an essential computer forensics use (T/F)
True
Cybercrimes can be classified into the following two types of attacks, base don
the line of attack:
internal
external
Espionage, theft of intellectual property, manipulation of records, and Trojan
horse attacks are examples of what?
insider attacks or primary threats
External attacks occur when there are inadequate information-security policies
and procedures (T/F)
True
Which type of cases involve disputes between two parties?
Civil
A computer forensic examiner can investigate any crime as long as he or she
takes detailed notes and follows the appropriate processes (T/F)
False
The computer forensic examiner must not continue with the investigation if the
examination is going to be beyond his or her knowledge level or skill level. In these
circumstances, the forensic investigator must seek the assistance of an experienced
specialist investigator or undergo training in that particular field to enhance his or her
knowledge or skill set. It would be wise to discontinue with the investigation if it is going
to adversely affect the outcome of the case. For more information on this topic
see Computer Hacking Forensics Investigator Ch
_______________ is the standard investigative model used by the FBI when
conducting investigations against major criminals organizations?
Enterprise Theory of Investigaiton
Digital devices store data about sessions such as user and type of connection
(T/F)
True
Forensic readiness includes technical and non technical actions that maximize an
organizations competence to use digital evidence (T/F)
True
Which of the following is the process of developing a strategy to address the
occurrence of any security breach in the system or network?
Incident response
