WorksheetsDigital Forensics SQA
Total questions: 12
Worksheet time: 6mins
Which one of the following acts states that individuals have a right to respect for the privacy of their e-mails
Copyright, Designs and Patents Act
Criminal Justice and Police Act
Human Rights Act
Computer Misuse Act
Which two of the following show why it is important to conduct an investigation on a copy of the data instead of the original
To allow other investigators to work on the data to speed up the investigation
To allow the investigation to be replicated
some tools will only work on copied data
To prevent any aspect of the investigation from tampering with the original evidence
At which stage of the digital forensics process would a write-blocker be used?
Acquisition
Reporting
Verification
Analysis
Applying preservation techniques during data acquisition can help to identify which of the following?
The name of the person who last logged in
Mac Number
Running programs
The IP address
Which two of the following software tools could be used during the analysis phase of the digital forensics process?
A word processor
A hex-editor
A network packet analyser
A file encryption tool
Which three of the following statement s describes forensic readiness?
How prepared a digital forensic investigator is to present their evidence in a court of law
How easy it is for the digital forensic investigator to find evidence which proves that someone is guilty
A machine which has been imaged for the forensic purposes
How prepared an organisation is to respond to an incident
Which one of the following files could be retrieved during browser forensics?
index.dat
history.ffx
passwords.txt
google.cache
Which one of the following acts allows certain organisations to get access to an individuals sent and received text messages?
Computer Misuse Act
Criminal Justice and Police Act
Copyright, Designs and Patents Act
Regulation of Investigatory Powers Act
Which three of the following are benefits of forensic readiness?
Forensic readiness reduces the costs of a digital forensic investigation.
Forensic readiness makes it easier for organisations to gather evidence.
Forensic readiness ensures that as much evidence as possible is available.
Forensic readiness makes it harder for a malicious hacker to access a network
Which two of the following are the role of the reporting stage of the digital forensic process?
The report describes the evidence which was obtained from the investigation.
The report is used to work out how much money to pay the investigator.
The report describes the investigation so that it can be understood by a non-technical person.
The report states whether or no the accused is guilty.
Which two of the following statements describing the steps in the digital forensic process are true?
The steps can be completed in any order.
The are laws explaining how the steps must be completed.
The steps must be completed in the order of accusation, analysis and reporting.
There are guidelines explaining how the steps should be completed.
The image shows a screenshot of some data.
Which one of the following is where data like this can be found?
Network infrastructure window
My computer
Recycle bin
External hard drive
