DIgital Forensics Quiz 4

Most federal courts have interpreted computer records as__evidence

• hearsay

• regular

• direct

• conclusive

Generally,computer evidence are considered admissible if they qualify as a__record

• hearsay

• computer-generated

• business

• computer-stored

__records are data the system maintains,such as system log files & proxy server logs

• Computer-generated

• Computer-stored

• Business

• Hearsay

Investigating & controlling incidents in corporate environment is__in the criminal environment

• as difficult as

• more difficult than

• much easier than

• as easy as

Minimally,corporate policies require that employers have a__that a law/policy is being violated

• reasonable suspicion

• reasonable proof

• proof

• court order stating

Confidential business data included with the criminal evidence are referred to as__data

• public

• exposed

• commingled

• revealed

Facts that lead a reasonable person to believe a crime has been or is about to be committed

• A subpoena

• Reasonable cause

• Probable cause

• A warrant

Law enforcement investigators need this to remove computers from a crime scene & move to a lab

• evidence custody form

• affidavit

• FOIA form

• warrant

Environmental &__issues are main concerns when working at the scene to gather info abt a crime

• legal

• corporate

• physical

• safety

With this,you can arrive at a scene,acquire needed data & return to the lab as fast as possible

• bit-stream copy utility

• initial-response field kit

• extensive-response field kit

• seizing order