Digital Evidence

Open Ended

In what ways can digital forensics impact the outcome of a legal case?

Multiple Choice

Why is digital evidence important in modern investigations?

• It helps solve crimes involving technology

• It is only used for entertainment purposes

• It is rarely accepted in courts

• It is less reliable than physical evidence

Multiple Select

Based on the information provided, what are some common motivations behind security breaches?

• Financial gain

• Espionage

• Revenge

• Entertainment

Multiple Choice

Which of the following is NOT a fact about digital crimes mentioned in the slides?

• Worldwide spending on cybersecurity is going to reach $133.7 billion in 2022.

• 68% of business leaders feel their cybersecurity risks are increasing.

• Data breaches exposed 4.1 billion records in the first half of 2019.

• Cybersecurity risks have decreased over the past decade.

Open Ended

Explain the significance of the average lifecycle of a breach lasting almost 11 months. What challenges does this present for organizations?

Fill in the Blanks

How frequently do hackers attack, according to the University of Maryland?

Multiple Choice

Arrange the five basic stages of the digital forensic process in the correct order.

• Identification, Preservation, Collection, Analysis, Reporting

• Preservation, Identification, Collection, Analysis, Reporting

• Collection, Analysis, Identification, Reporting, Preservation

• Reporting, Analysis, Collection, Preservation, Identification

Fill in the Blanks

What is the purpose of a writeblocker in computer forensics?

Multiple Choice

Which of the following are examples of digital evidence that can be used in criminal investigations?

• Snapchat pictures

• Vehicle GPS data

• Fitbits data

• All of the above

Open Ended

Explain how digital evidence can be used in court to solve crimes. Provide an example from the lesson.

Multiple Select

Which of the following statements about deleted data is/are correct?

• Deleted files are completely erased from the computer immediately.

• Deleted files can sometimes be recovered from unallocated space.

• Allocated space is where labeled information is stored.

• Forensic investigators cannot recover deleted files after the Recycle Bin is emptied.

Fill in the Blanks

Preserving digital evidence is challenging because it can be altered or deleted

.

Open Ended

Reflecting on today's lesson, what aspect of digital evidence or digital forensics would you like to learn more about or discuss further?

Multiple Choice

What types of electronic media can digital forensics be used to find evidence on?

• Computers, servers, cell phones, emails, disk storage

• Books, newspapers, magazines, journals

• Paintings, sculptures, photographs

• Handwritten letters, postcards, greeting cards