WGU C702 FINAL EXAM
QUESTIONS AND ANSWERS
2023/2024 | Latest Graded A+
, WGU C702 EXAM QUESTION AND ANSWERS
1. A software company suspects that employees have set up automatic cor-
porate email forwarding to their personal inboxes against company policy.
The company hires forensic investigators to identify the employees violating
policy, with the intention of issuing warnings to them.
Which type of cybercrime investigation approach is this company taking?
Civil
Criminal
Administrative
Punitive: Administrative
2. Which model or legislation applies a holistic approach toward any crimina
activity as a criminal operation?
Enterprise Theory of Investigation
Racketeer Influenced and Corrupt Organizations Act
Evidence Examination
Law Enforcement Cyber Incident Reporting: Enterprise Theory of Investigation
3. What does a forensic investigator need to obtain before seizing a comput-
ing device in a criminal case?
Court warrant
Completed crime report
Chain of custody document
Plaintiff's permission: Court warrant
4. Which activity should be used to check whether an application has ever
been installed on a computer?
Penetration test
Risk analysis
Log review
Security review: Log review
5. Which characteristic describes an organization's forensic readiness in the
context of cybercrimes?
It includes moral considerations.
It includes cost considerations.
, WGU C702 EXAM QUESTION AND ANSWERS
It excludes nontechnical actions.
It excludes technical actions.: It includes cost considerations.
6. A cybercrime investigator identifies a Universal Serial Bus (USB) memory
stick containing emails as a primary piece of evidence.
Who must sign the chain of custody document once the USB stick is in
evidence?
Those who obtain access to the device
Anyone who has ever used the device
Recipients of emails on the device
Authors of emails on the device: Those who obtain access to the device
7. Which type of attack is a denial-of-service technique that sends a large
amount of data to overwhelm system resources?
Phishing
Spamming
Mail bombing
Bluejacking: Mail bombing
8. Which computer crime forensics step requires an investigator to duplicate
and image the collected digital information?
Securing evidence
Acquiring data
Analyzing data
Assessing evidence: Acquiring data
9. What is the last step of a criminal investigation that requires the involve-
ment of a computer forensic investigator?
Analyzing the data collected
Testifying in court
Assessing the evidence
Performing search and seizure: Testifying in court
10. How can a forensic investigator verify an Android mobile device is on,
without potentially changing the original evidence or interacting with the
operating system?
Check to see if it is plugged into a computer
QUESTIONS AND ANSWERS
2023/2024 | Latest Graded A+
, WGU C702 EXAM QUESTION AND ANSWERS
1. A software company suspects that employees have set up automatic cor-
porate email forwarding to their personal inboxes against company policy.
The company hires forensic investigators to identify the employees violating
policy, with the intention of issuing warnings to them.
Which type of cybercrime investigation approach is this company taking?
Civil
Criminal
Administrative
Punitive: Administrative
2. Which model or legislation applies a holistic approach toward any crimina
activity as a criminal operation?
Enterprise Theory of Investigation
Racketeer Influenced and Corrupt Organizations Act
Evidence Examination
Law Enforcement Cyber Incident Reporting: Enterprise Theory of Investigation
3. What does a forensic investigator need to obtain before seizing a comput-
ing device in a criminal case?
Court warrant
Completed crime report
Chain of custody document
Plaintiff's permission: Court warrant
4. Which activity should be used to check whether an application has ever
been installed on a computer?
Penetration test
Risk analysis
Log review
Security review: Log review
5. Which characteristic describes an organization's forensic readiness in the
context of cybercrimes?
It includes moral considerations.
It includes cost considerations.
, WGU C702 EXAM QUESTION AND ANSWERS
It excludes nontechnical actions.
It excludes technical actions.: It includes cost considerations.
6. A cybercrime investigator identifies a Universal Serial Bus (USB) memory
stick containing emails as a primary piece of evidence.
Who must sign the chain of custody document once the USB stick is in
evidence?
Those who obtain access to the device
Anyone who has ever used the device
Recipients of emails on the device
Authors of emails on the device: Those who obtain access to the device
7. Which type of attack is a denial-of-service technique that sends a large
amount of data to overwhelm system resources?
Phishing
Spamming
Mail bombing
Bluejacking: Mail bombing
8. Which computer crime forensics step requires an investigator to duplicate
and image the collected digital information?
Securing evidence
Acquiring data
Analyzing data
Assessing evidence: Acquiring data
9. What is the last step of a criminal investigation that requires the involve-
ment of a computer forensic investigator?
Analyzing the data collected
Testifying in court
Assessing the evidence
Performing search and seizure: Testifying in court
10. How can a forensic investigator verify an Android mobile device is on,
without potentially changing the original evidence or interacting with the
operating system?
Check to see if it is plugged into a computer
