CFCD Quiz #3

If you seize a device from a suspect which is left on, how would you handle this device.

• Turn off the device

• Transfer funds from the device

• Leave the device in the state it was found

• Give the suspect the device to turn off

Name the three types of extraction

• Physical, logical, file system

• File system, Full system, logical

• Physical, special, logical

• System user, full, logical

What is the first action to be taken when a device is seen connected to a network

• Pull the power chord

• Ask the owner to retrieve the information

• Contact CFCD

• Disconnect the servers and take system to CFCD

What action should be taken if you retrieve a video footage without a CFCD personnel being present

• Submit the footage at CFCD

• Contact CFCD to retrieve the footage at your station

• Conduct your investigation using the footage without submitting it to CFCD

• Take a statement from the individual who retrieved the footage

What types of digital forensics services does CFCD offer?

• Mobile Forensics

• Computer Forensics

• Video & Audio Forensics

• All of the above

What action should be taken if you come in contact with a digital device that has blood contaminant?

• Take it to CFCD immediately

• Clean it with a damp clothe

• Get it fumigated before submitting to CFCD

• Wash it off with water

Before entering and searching a target location, what must be present?

• A Justice of the peace

• A warrant

• A police car

• All of the above

When you receive a disc or flash drive with data for your perusal, labelled not for court, how long after you give a feedback should a report follow?

• 1 day

• 2 weeks

• 30 days

• 2 months

CFCD Digital forensic unit does active investigation?

• True

• False

You should leave a crime scene without requesting the passcode for the device from the owner of said device?

• True

• False