SCI-255 Week 12

Forensic computer analysis is only used to detect crime, not prevent it.

• True

• False

A forensic computer analysis cannot always tell us:

• what files have been downloaded

• Why a person accessed a website

• The last time a filed was opened

• When a person logged in to a site

If a computer is found OFF, it should be:

• Left off

• Turned on

If you find a computer that is on, it should be shut off using the normal shut down procedure.

• True

• False

What is the last step before disconnecting cables from the computer?

• Label each connection

• Photograph the cables

• Write notes of each connection & cord

• Disconnect the power

The exemplar document is an unknown sample of handwriting.

• True

• False

Document examiners cannot identify a typewriter make and model from a typed document.

• True

• False

This type of document alteration occurs when something is added.

• Obliteration

• Alteration

• Erasure

• Indentation

How do you package an unfolded document?

• Refold it and place into paper envelope

• Place into paper envelope as is

• Refold it and place into plastic bag

• Place into plastic bag as is

How are charred documents packaged?

• Cardboard box

• Paper bag

• Paper envelope

• Plastic bag