Question 1

Use ____ to secure and catalog the evidence contained in large computer components.

Accepted Answer

evidence bags

Question 2

When you write your final report, state what you did and what you ____.

Accepted Answer

found

Question 3

Based on the incident or crime, the complainant makes a(n) ____, an accusation or supposition of fact that a crime has been committed.

Accepted Answer

allegation

Question 4

You can use ____ to boot to Windows without writing any data to the evidence disk.

Accepted Answer

a write-blocker

Question 5

A(n) ____ is a person using a computer to perform routine tasks other than systems administration.

Accepted Answer

end user

Question 6

Forensics tools such as ____ can retrieve deleted files for use as evidence.

Accepted Answer

ProDiscover Basic

Question 7

A(n) ____ helps you document what has and has not been done with both the original evidence and forensic copies of the evidence.

Accepted Answer

evidence custody form

Question 8

After a judge approves and signs a search warrant, it’s ready to be executed, meaning you can collect evidence as defined by the warrant.

Accepted Answer

True

Question 9

By the early 1990s, the ____ introduced training on software for forensics investigations.

Accepted Answer

IACIS

Question 10

In a ____ case, a suspect is tried for a criminal offense, such as burglary, murder, or molestation.

Accepted Answer

criminal

Question 11

When you write your final report, state what you did and what you ____.

Accepted Answer

found

Question 12

Many attorneys like to have printouts of the data you have recovered, but printouts can present problems when you have log files with several thousand pages of data.

Accepted Answer

True

Question 13

In any computing investigation, you should be able to repeat the steps you took and produce the same results. This capability is referred to as ____.

Accepted Answer

repeatable findings

Question 14

In the Pacific Northwest, ____ meets monthly to discuss problems that law enforcement and corporations face.

Accepted Answer

CTIN

Question 15

____ investigations typically include spam, inappropriate and offensive message content, and harassment or threats.

Accepted Answer

E-mail

Question 16

____ involves preventing data loss by using backups, uninterruptible power supply (UPS) devices, and off-site monitoring.

Accepted Answer

Disaster recovery

Question 17

When analyzing digital evidence, your job is to ____.

Accepted Answer

recover the data

Question 18

Employees surfing the Internet can cost companies millions of dollars.

Accepted Answer

True

Question 19

The law of search and seizure protects the rights of all people, excluding people suspected of crimes.

Accepted Answer

False

Question 20

In a criminal or public case, if you have enough information to support a search warrant, the prosecuting attorney might direct you to submit a(n) ____.

Accepted Answer

affidavit

Question 21

The ____ group manages investigations and conducts forensic analysis of systems suspected of containing evidence related to an incident or a crime.

Accepted Answer

computer investigations

Question 22

To create an exact image of an evidence disk, copying the ____ to a target work disk that’s identical to the evidence disk is preferable.

Accepted Answer

bit-stream image

Question 23

Chain of custody is also known as chain of evidence.

Accepted Answer

True

Question 24

It’s the investigator’s responsibility to write the affidavit, which must include ____ (evidence) that support the allegation to justify the warrant.

Accepted Answer

exhibits

"Know" box contains:
Time elapsed:
Retries:

Stack #1777398