WGU C702 CHFI and OA Questions and Verified
Answers (2023
What must an investigator do in order to offer a good report to a court of law and ease the prosecution?
prosecute the evidence
obfuscate the evidence
authorize the evidence
preserve the evidence - ANSWER>>preserve the evidence
Which of the following is NOT a legitimate authorizer of a search warrant?
magistrate
court of law
first responder
concerned authority - ANSWER>>first responder
Which of the following is true regarding computer forensics?
Computer forensics deals with the monetary cost of finding evidence related to a crime to find the
culprits and initiate legal action against them.
Computer forensics deals with the search for evidence related to a digital crime, but the forensics
specialist does not need to be concerned about the legal admissibility of the evidence they find.
Computer forensics deals with the process of finding evidence related to a digital crime to find the
culprits and initiate legal action against them.
Computer forensics deals only with the process of finding evidence related to a digital crime and does
not try to estimate the monetary damages caused by that crime. - ANSWER>>Computer forensics deals
with the process of finding evidence related to a digital crime to find the culprits and initiate legal action
against them.
Which of the following is true regarding Enterprise Theory of Investigation (ETI)?
It adopts an approach toward criminal activity as a criminal act.
It adopts a holistic approach toward any criminal activity as a criminal operation rather than as a single
criminal activity.
,It differs from traditional investigative methods and is less complex and less time consuming.
It encourages reactive action on the structure of the criminal enterprise. - ANSWER>>It adopts a holistic
approach toward any criminal activity as a criminal operation rather than as a single criminal activity.
Which of the following is NOT an element of cyber crime?
fast-paced speed
smaller evidence in size
anonymity through masquerading volatile evidence - ANSWER>>smaller evidence in size
Which of the following is true of civil crimes?
The initial reporting of the evidence is generally informal.
Law enforcement agencies are responsible for collecting and analyzing evidence.
The standards of proof need to be very high.
A formal investigation report is required. - ANSWER>>The initial reporting of the evidence is generally
informal.
Which of the following is NOT a consideration during a cyber crime investigation?
presentation of admissible evidence
value or cost to the victim
collection of clues and forensic evidence
analysis of digital evidence - ANSWER>>value or cost to the victim
Which of the following should be considered before planning and evaluating the budget for the forensic
investigation case?
break down of costs into daily and annual expenditure
current media coverage of high profile computer crimes
past success rate as a measure of value
use of outdated, but trusted, technologies - ANSWER>>break down of costs into daily and annual
expenditure
Which of the following is NOT part of the Computer Forensics Investigation Methodology?
, Secure the evidence.
Collect the evidence.
Destroy the evidence.
Assess the evidence. - ANSWER>>Destroy the evidence.
Which of the following is NOT where potential evidence may be located?
thumb drive
digital camera
smart card
processor - ANSWER>>processor
Which of the following Federal Rules of Evidence governs proceedings in the courts of the United
States?
Rule 105
Rule 102
Rule 103
Rule 101 - ANSWER>>Rule 101
Which of the following Federal Rules of Evidence contains Rulings on Evidence?
Rule 105
Rule 101
Rule 102
Rule 103 - ANSWER>>Rule 103
Which of the following is NOT a digital data storage type?
magnetic storage devices
optical storage devices
flash memory devices
quantum storage devices - ANSWER>>quantum storage devices
Which of the following is NOT a type of flash-based memory?
Double-level cell (DLC)
Single-level cell (SLC)
Multi-level cell (MLC)
Triple-level cell (TLC) - ANSWER>>Double-level cell (DLC)
Answers (2023
What must an investigator do in order to offer a good report to a court of law and ease the prosecution?
prosecute the evidence
obfuscate the evidence
authorize the evidence
preserve the evidence - ANSWER>>preserve the evidence
Which of the following is NOT a legitimate authorizer of a search warrant?
magistrate
court of law
first responder
concerned authority - ANSWER>>first responder
Which of the following is true regarding computer forensics?
Computer forensics deals with the monetary cost of finding evidence related to a crime to find the
culprits and initiate legal action against them.
Computer forensics deals with the search for evidence related to a digital crime, but the forensics
specialist does not need to be concerned about the legal admissibility of the evidence they find.
Computer forensics deals with the process of finding evidence related to a digital crime to find the
culprits and initiate legal action against them.
Computer forensics deals only with the process of finding evidence related to a digital crime and does
not try to estimate the monetary damages caused by that crime. - ANSWER>>Computer forensics deals
with the process of finding evidence related to a digital crime to find the culprits and initiate legal action
against them.
Which of the following is true regarding Enterprise Theory of Investigation (ETI)?
It adopts an approach toward criminal activity as a criminal act.
It adopts a holistic approach toward any criminal activity as a criminal operation rather than as a single
criminal activity.
,It differs from traditional investigative methods and is less complex and less time consuming.
It encourages reactive action on the structure of the criminal enterprise. - ANSWER>>It adopts a holistic
approach toward any criminal activity as a criminal operation rather than as a single criminal activity.
Which of the following is NOT an element of cyber crime?
fast-paced speed
smaller evidence in size
anonymity through masquerading volatile evidence - ANSWER>>smaller evidence in size
Which of the following is true of civil crimes?
The initial reporting of the evidence is generally informal.
Law enforcement agencies are responsible for collecting and analyzing evidence.
The standards of proof need to be very high.
A formal investigation report is required. - ANSWER>>The initial reporting of the evidence is generally
informal.
Which of the following is NOT a consideration during a cyber crime investigation?
presentation of admissible evidence
value or cost to the victim
collection of clues and forensic evidence
analysis of digital evidence - ANSWER>>value or cost to the victim
Which of the following should be considered before planning and evaluating the budget for the forensic
investigation case?
break down of costs into daily and annual expenditure
current media coverage of high profile computer crimes
past success rate as a measure of value
use of outdated, but trusted, technologies - ANSWER>>break down of costs into daily and annual
expenditure
Which of the following is NOT part of the Computer Forensics Investigation Methodology?
, Secure the evidence.
Collect the evidence.
Destroy the evidence.
Assess the evidence. - ANSWER>>Destroy the evidence.
Which of the following is NOT where potential evidence may be located?
thumb drive
digital camera
smart card
processor - ANSWER>>processor
Which of the following Federal Rules of Evidence governs proceedings in the courts of the United
States?
Rule 105
Rule 102
Rule 103
Rule 101 - ANSWER>>Rule 101
Which of the following Federal Rules of Evidence contains Rulings on Evidence?
Rule 105
Rule 101
Rule 102
Rule 103 - ANSWER>>Rule 103
Which of the following is NOT a digital data storage type?
magnetic storage devices
optical storage devices
flash memory devices
quantum storage devices - ANSWER>>quantum storage devices
Which of the following is NOT a type of flash-based memory?
Double-level cell (DLC)
Single-level cell (SLC)
Multi-level cell (MLC)
Triple-level cell (TLC) - ANSWER>>Double-level cell (DLC)
