CHAPTER 15 ASSESSMENT

1. A system backup copy is considered a forensic duplicate image.

A. True

B. False

2. What is an exception to the Fourth Amendment’s search warrant requirement?

A. Consent

B. Plain view doctrine

C. Inventory search

D. All of these are correct.

E. None of these is correct.

3. Which principle is a basic assumption of forensic science?

A. The silver platter doctrine

B. Exigent circumstances

C. Locard’s exchange principle

D. The Daubert test

E. None of these is correct.

4. What are the three main electronic communications eavesdropping laws?

5. What is another common term for computer forensics?

6. Which type of computer forensics focuses on examining programming code?

A. Media analysis

B. Malware forensics

C. Internet forensics

D. Network analysis

E. None of these is correct.

7. Which forensic certification is only available to law enforcement personnel?

A. CCE

B. GCFA

C. CCFE

D. EnCE

E. None of these is correct.

8. A computer can play one of ________ roles in a crime.

9. Which investigative step includes “bag and tag”?

A. Identification

B. Preservation

C. Collection

D. Examination

E. None of these is correct.

10. Which investigative step includes interviewing persons of interest for information about electronic devices?

A. Identification

B. Preservation

C. Collection

D. Presentation

E. None of these is correct.

11. Which organization created the most well-known guiding principles for computer forensic examiners?

A. IOCE

B. ISO/IEC

C. ISFCE

D. IACRB

E. None of these is correct.

12. What is volatile data?

13. Which law governs the collection of real-time transmission data?

A. The Electronic Communications Privacy Act

B. The Wiretap Act

C. The Pen Register and Trap and Trace Statute

D. The Fourth Amendment

E. None of these is correct.

14. A trap and trace device monitors incoming transmission data.

A. True

B. False

15. A forensic duplicate image is a ________.