CISSP Module 7

What is the purpose of testing Disaster Recovery Plans?

• To ensure the effectiveness of recovery strategies

• To manage physical security

• To address personnel safety concerns

• To participate in change management processes

What must be provided by the prosecuting attorneys to prove an individual's guilt beyond a reasonable doubt?

• A) A confession

• B) Sufficient evidence

• C) A witness testimony

• D) A motive

Which of the following is NOT one of the basic requirements for evidence to be considered admissible in court?

• A) The evidence must be relevant to determine a fact

• B) The evidence must be related to the case

• C) The evidence must be obtained legally

• D) The evidence must be presented by the defense attorney

What are the three types of evidence that can be used in a court of law?

• Real Evidence, Documentary Evidence, Testimonial Evidence

• Physical Evidence, Written Evidence, Oral Evidence

• Best Evidence, Parol Evidence, Real Evidence

• Original Evidence, Copy Evidence, Verbal Evidence

What does Parol Evidence refer to?

• Originals used (not copies)

• Any agreement in writing that can not be changed by a verbal agreement afterwards

• Copies used (not originals)

• Verbal agreement that changes written agreement

Who should undertake the collection of digital evidence?

• Any individual with basic computer knowledge

• Professional forensic technicians

• Law enforcement officers only

• IT support staff

When analyzing digital evidence, what is it best to work with whenever possible?

• A copy of actual evidence

• The original evidence

• A summary of the evidence

• A verbal description of the evidence

What must every investigation result in?

• A) A verbal report

• B) A final report documenting the goals, evidence collected, procedures followed, and final results

• C) An informal discussion

• D) A summary email

What factors determine the degree of formality behind an investigation report?

• A) The investigator's personal preference

• B) The organization's policy and procedures and the nature of the investigation

• C) The time of year

• D) The location of the investigation

Why is it important to prepare formal documentation for an investigation?

• A) It is a legal requirement in all cases

• B) It lays the foundation for escalation and potential legal action

• C) It is easier to share with colleagues

• D) It saves time in the long run