Digital Forensics SQA

Which one of the following acts states that individuals have a right to respect for the privacy of their e-mails

• Copyright, Designs and Patents Act

• Criminal Justice and Police Act

• Human Rights Act

• Computer Misuse Act

Which two of the following show why it is important to conduct an investigation on a copy of the data instead of the original

• To allow other investigators to work on the data to speed up the investigation

• To allow the investigation to be replicated

• some tools will only work on copied data

• To prevent any aspect of the investigation from tampering with the original evidence

At which stage of the digital forensics process would a write-blocker be used?

• Acquisition

• Reporting

• Verification

• Analysis

Applying preservation techniques during data acquisition can help to identify which of the following?

• The name of the person who last logged in

• Mac Number

• Running programs

• The IP address

Which two of the following software tools could be used during the analysis phase of the digital forensics process?

• A word processor

• A hex-editor

• A network packet analyser

• A file encryption tool

Which three of the following statement s describes forensic readiness?

• How prepared a digital forensic investigator is to present their evidence in a court of law

• How easy it is for the digital forensic investigator to find evidence which proves that someone is guilty

• A machine which has been imaged for the forensic purposes

• How prepared an organisation is to respond to an incident

Which one of the following files could be retrieved during browser forensics?

• index.dat

• history.ffx

• passwords.txt

• google.cache

Which one of the following acts allows certain organisations to get access to an individuals sent and received text messages?

• Computer Misuse Act

• Criminal Justice and Police Act

• Copyright, Designs and Patents Act

• Regulation of Investigatory Powers Act

Which three of the following are benefits of forensic readiness?

• Forensic readiness reduces the costs of a digital forensic investigation.

• Forensic readiness makes it easier for organisations to gather evidence.

• Forensic readiness ensures that as much evidence as possible is available.

• Forensic readiness makes it harder for a malicious hacker to access a network

Which two of the following are the role of the reporting stage of the digital forensic process?

• The report describes the evidence which was obtained from the investigation.

• The report is used to work out how much money to pay the investigator.

• The report describes the investigation so that it can be understood by a non-technical person.

• The report states whether or no the accused is guilty.