SCI-255 Week 12

Front

What is a limitation of forensic computer analysis regarding user behavior?

Back

Forensic computer analysis cannot always tell us why a person accessed a website.

Front

What is the last step in the process of disconnecting cables from a computer?

Back

Label each connection.

Front

What should you do if you find a computer that is on?

Back

You should not shut it off using the normal shut down procedure.

Front

Is forensic computer analysis only used to detect crime?

Back

No, forensic computer analysis is also used to prevent crime.

Front

What should be done if a computer is found turned off?

Back

It should be left off.

Front

What is the purpose of labeling connections when disconnecting a computer?

Back

Labeling connections helps to ensure that cables can be reconnected correctly.

Front

Why is it important to follow proper shutdown procedures for a computer?

Back

Improper shutdown can lead to data loss or corruption.

Front

What is the role of forensic computer analysis in cybersecurity?

Back

Forensic computer analysis helps in both detecting and preventing cybercrimes.

Front

What are some common tools used in forensic computer analysis?

Back

Common tools include EnCase, FTK Imager, and Autopsy.

Front

What is the significance of preserving the state of a computer during forensic analysis?

Back

Preserving the state ensures that evidence is not altered or destroyed.