Chapter 2.4

Below is Digital Forensic Methodology, except

• Identification

• Collection

• Reservation

• Preservation

Which phase need Team Leader shall conduct a briefing

and brainstorming sessions?

• Analysis

• Collection

• Identification

• Presentation

In DF Methodology, the phase deals with extracting, examining and reconstructing data from the evidence based on case objectives is

• Collection

• Presentation

• Identification

• Analysis

__________is producing a final report from the investigation to

client or court. Fill in the blank.

• Presentation

• Reporting

• Collection

Labelling Device & Sub Device is phase of _________ in DF Methodology

• Analysis

• Presentation

• Collection

• Identification

The chain of custody (COC) is part of importance phase DFFR should do in investigation. Which phase of COC should start?

• Collection

• identification

• Analysis

• Presentation

Definition of Chain of Custody is

• A package to transport the evidence

• Antistatic plastic Bag

• Documentation of Forensic Details

• Chronological documentation of electronic evidence

DFFR would involve with only three (3) phases of the Digital Forensics Methodology, Except

• Collection

• Identification

• Analysis

• Preservation

Phase where DFFR collects some preliminary information prior

to collecting the evidence is

• Collection

• Identification

• Analysis

• Presentation

_________ to set off to the premise to collect the evidence

• Identification

• Presentation

• Analysis

• Collection