CASP+: Chapter 12 Digital Forensics Process Quiz

What is the main focus of digital forensics?

• Supporting incident capabilities

• Investigating physical crimes

• Developing software applications

• Managing financial records

What are the two main categories for investigating an incident?

• Legal and financial

• Internal and external

• Physical and digital

• Technical and non-technical

What is the first phase in a forensic investigation?

• Collection

• Identification

• Reporting

• Analysis

What should be done to ensure the scene is safe during an investigation?

• Secure the scene to prevent contamination

• Collect all evidence immediately

• Start analyzing evidence on-site

• Inform the media about the incident

What is the purpose of creating a copy of evidence for analysis?

• To confuse the investigators

• To ensure the original evidence remains untouched

• To manipulate the evidence

• To hide crucial information

Which phase involves using repeatable methods and tools to analyze evidence?

• Analysis

• Reporting

• Collection

• Identification

Where can a list of tested forensic tools be found?

• FBI website

• Interpol database

• CIA archives

• NIST website

What is the final phase in a forensic investigation?

• Analysis

• Reporting

• Collection

• Identification

What should be done to ensure the integrity of evidence during collection?

• Use tools and methods that will not withstand legal scrutiny

• Document and prove the integrity of evidence

• Store evidence in unsecured packaging

• Collect evidence without authorization

When should forensic investigations be performed by qualified investigators?

• In all scenarios

• Only in legal matters

• Only in internal investigations

• Never