WorksheetsComputer Forensics
Total questions: 8
Worksheet time: 4mins
Which one of the following acts states that individuals have a right to respect for the privacy of their e-mails
Copyright, Designs and Patents Act
Criminal Justice and Police Act
Human Rights Act
Computer Misuse Act
Which two of the following show why it is important to conduct an investigation on a copy of the data instead of the original
To allow other investigators to work on the data to speed up the investigation
To allow the investigation to be replicated
some tools will only work on copied data
To prevent any aspect of the investigation from tampering with the original evidence
At which stage of the digital forensics process would a write-blocker be used?
Acquisition
Reporting
Verification
Analysis
Applying preservation techniques during data acquisition can help to identify which of the following?
The name of the person who last logged in
Mac Number
Running programs
The IP address
Which two of the following software tools could be used during the analysis phase of the digital forensics process?
A word processor
A hex-editor
A network packet analyser
A file encryption tool
Which three of the following statement s describes forensic readiness?
How prepared a digital forensic investigator is to present their evidence in a court of law
How easy it is for the digital forensic investigator to find evidence which proves that someone is guilty
A machine which has been imaged for the forensic purposes
How prepared an organisation is to respond to an incident
Which three of the following statements describes forensic readiness?
How prepared a digital forensic investigator is to present their evidence in a court of law
How easy it is for the digital forensic investigator to find evidence which proves that someone is guilty
A machine which has been imaged for forensic purposes
How prepared an organisation is to respond to an incident
Which one of the following files could be retrieved during browser forensics?
index.dat
history.ffx
passwords.txt
google.cache
