CYB 220 - CHAPTER 3 QUIZ-CHAPTER 3
- FORENSIC METHODS & LABS FROM
JB LEARNING WITH COMPLETE
SOLUTIONS
True or False? From the perspective of digital forensics, changing the time or date
stamp on a file does not alter the file. - ANSWER-False
True or False? Making two copies of a suspect's drive, using two different imaging tools,
can help to prove that evidence is accurate. - ANSWER-True
__________ govern whether, when, how, and why proof of a legal case can be placed
before a judge or jury. - ANSWER-The rules of evidence
Tonya is entering the digital forensics field and wants to pursue a general forensics
certification. Which certification is best to start with? - ANSWER-EC-Council Certified
Hacking Forensic Investigator
According to the order of volatility in RFC 3227, what evidence should you collect first
on a typical system? - ANSWER-Volatile data, then file slack
True or False? To achieve American Society of Crime Laboratory Directors (ASCLD)
accreditation, a lab must meet about 400 criteria. - ANSWER-True
As a forensic investigator, you should develop _________, which covers how you will
gather evidence and which tools are most appropriate for a specific investigation. -
ANSWER-An analysis plan
One principle of evidence gathering is to avoid changing the evidence. Which of the
following steps will not help you avoid changing evidence? - ANSWER-Photograph
seized equipment after you set it up in the lab.
When gathering systems evidence, what is not a common principle? - ANSWER-Trust
only virtual evidence
Use of __________ enables an investigator to reconstruct file fragments if files have
been deleted or overwritten. - ANSWER-Bit-level tools
True or False? An expert witness who leaves information out of an expert report usually
cannot testify about the information at trial. - ANSWER-True
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller NursingTutor1. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $11.49. You're not tied to anything after your purchase.
