Exam (elaborations)
C702 FULL QUESTIONS AND ANSWERS
- Course
- Institution
C702 FULL QUESTIONS AND ANSWERS
[Show more]
Content preview
C702 FULL QUESTIONS AND ANSWERSWhich of the following is not an objective of computer forensics?
A. Computer forensics deals with the process of finding evidence related to a digital
crime to find the victims and prevent legal action against them.
B. Computer forensics deals with the process of finding evidence related to a crime to
find the culprits and initiate legal action against them.
C. Computer forensics deals with the process of finding evidence related to a digital
crime to find the culprits and initiate legal action against them.
D. Computer forensics deals with the process of finding evidence related to a digital
crime to find the culprits and avoid legal action against them. - C
Which of the following is not an objective of computer forensics?
A. Track and prosecute the perpetrators in a court of law.
B. Identify, gather, and preserve the evidence of a cybercrime.
C. Interpret, document, and present the evidence to be admissible during prosecution.
D. Document vulnerabilities allowing further loss of intellectual property, finances, and
reputation during an attack. - D
Which of the following is true regarding the enterprise theory of investigation (ETI) ?
A. It adopts a holistic approach toward any criminal activity as a criminal operation
rather than as a single criminal act.
B. It adopts an approach toward criminal activity as a criminal act.
C. It differs from traditional investigative methods, and it is less complex and less time-
consuming.
D. It encourages reactive action on the structure of the criminal enterprise. - A
Which of the following Federal Rules of Evidence governs proceedings in the courts of
the United States?
A. Rule 105
B. Rule 103
C. Rule 101
D. Rule 102 - C
Which of the following Federal Rules of Evidence ensures that the truth may be
ascertained and the proceedings justly determined?
A. Rule 105
B. Rule 102
C. Rule 101
,D. Rule 103 - B
Which of the following Federal Rules of Evidence contains Rulings on Evidence?
A. Rule 103
B. Rule 105
C. Rule 102
D. Rule 101 - A
Which of the following Federal Rules of Evidence states that the court shall restrict the
evidence to its proper scope and instruct the jury accordingly?
A. Rule 102
B. Rule 103
C. Rule 101
D. Rule 105 - D
Which of the following answers refers to a set of methodological procedures and
techniques to identify, gather, preserve, extract, interpret, document, and present
evidence from computing equipment in such a manner that the discovered evidence is
acceptable during a legal and/or administrative proceeding in a court of law?
A. disaster recovery
B. incident handling
C. computer forensics
D. network analysis - C
Computer forensics deals with the process of finding _______ related to digital crime to
find the culprits and initiate legal action against them.
A. insider threats
B. evidence
C. fraud
D. malware - B
Minimizing the tangible and intangible losses to the organization or an individual is
considered an essential computer forensics use.
A. True
B. False - A
Cybercrimes can be classified into the following two types of attacks, based on the line
of attack.
A. Fraud and Spam
B. Phishing and Malware
,C. Internal and External - C
Espionage, theft of intellectual property, manipulation of records, and Trojan horse
attacks are examples of what?
A. insider attacks or secondary threats
B. insider attacks or primary threats
C. outsider attacks or secondary threats
D. outsider attacks or primary threats - B
External attacks occur when there are inadequate information-security policies and
procedures.
A. True
B. False - A
Which type of cases involve disputes between two parties?
A. civil
B. investigative
C. administrative
D. criminal - A
A computer forensic examiner can investigate any crime as long as he or she takes
detailed notes and follows appropriate processes.
A. True
B. False - B
_______ is the standard investigative model used by the FBI when conducting
investigations against major criminal organizations.
A. Enterprise Theory of Investigation (ETI)
B. Both Enterprise Theory of Investigation (ETI) and Entrepreneur Theory of
Investigation
C. Entrepreneur Theory of Investigation - A
Digital devices store data about sessions such as user and type of connection.
A. True
B. False - A
Forensic readiness includes technical and non-technical actions that maximize an
organization's competence to use digital evidence.
A. True
, B. False - A
Forensic readiness referrers to:
A. having no impact on prospects of successful legal action
B. replacing the need to meet all regulatory requirements
C. the establishment of specific incident response procedures and designated trained
personnel to prevent a breach
D. an organization's ability to make optimal use of digital evidence in a limited time
period and with minimal investigation costs - D
Which of the following is not an element of cybercrime?
A. anonymity through masquerading
B. fast-paced speed
C. volatile evidence
D. evidence smaller in size - D
Which of the following is true of cyber crimes?
A. Investigators, with a warrant, have the authority to forcibly seize the computing
devices.
B. Investigators attempt to demonstrate information to the opposite party to support the
claims and induce settlement.
C. The searching of the devices is based on mutual understanding and provides a wider
time frame to hide the evidence.
D. The claimant is responsible for the collection and analysis of the evidence. - A
Which of the following is true of civil crimes?
A. The initial reporting of the evidence is generally informal.
B. A formal investigation report is required.
C. Law enforcement agencies are responsible for collecting and analyzing evidence.
D. The standards of proof need to be very high. - A
Which of the following is not a consideration during a cybercrimes investigation?
A. collection of clues and forensic evidence
B. analysis of digital evidence
C. presentation of admissible evidence
D. value or cost to the victim - D
Which of the following is a user-created source of potential evidence?
A. address book
B. printer spool
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller GEEKA. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $16.49. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
72042 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now