CISSP Crash Course - Investigation Requirements

The video tutorial covers various types of investigations, including administrative, criminal, civil, and regulatory. It explains the electronic discovery reference model, detailing its components like information governance and preservation. The tutorial also discusses different types of evidence, such as real, documentary, testimonial, and demonstrative, emphasizing the importance of relevance, materiality, and competence. It highlights the principles of digital forensic evidence and the chain of custody. Finally, it outlines the investigative process, from evidence gathering to reporting.

Which type of investigation is typically conducted by law enforcement to address violations of criminal law?

• Regulatory Investigation

• Civil Investigation

• Criminal Investigation

• Administrative Investigation

What is the primary purpose of the electronic discovery reference model?

• To destroy irrelevant evidence

• To hide evidence from stakeholders

• To preserve and provide evidence to stakeholders

• To create new evidence

Which type of evidence is considered physical and can be presented in court?

• Documentary Evidence

• Testimonial Evidence

• Real Evidence

• Demonstrative Evidence

What is the chain of custody primarily concerned with?

• The financial value of evidence

• The digital format of evidence

• The sequence of custody, control, transfer, and analysis of evidence

• The legal ownership of evidence

Which principle is crucial when handling forensic digital evidence?

• Evidence can be altered if necessary

• Evidence should be collected without any documentation

• Only trained personnel should access original digital evidence

• Digital evidence should be shared freely

Where can digital forensic evidence be found?

• In physical documents

• In regulatory reports

• In verbal testimonies

• In media, networks, memory, software, and hardware

What is the final step in the investigative process?

• Reporting and documenting the investigation

• Interviewing individuals

• Gathering evidence

• Involving law enforcement