CHFI v9 Module 1

When retrieving evidence from a particular electronic device, investigators need not worry about unlawful search and seizure according to Fourth Amendment laws.

• True

• False

In the Enterprise Theory of Investigation (ETI) you can view criminal acts as more than isolated crimes.

• True

• False

How many types of Cybercrime investigations are there?

• 4

• 2

• 3

• Many

This principle refers to the fact that when you enter a crime scene you both take something with you and leave something behind.

• Exchange Principle

• Locard's Exchange Principle

• Cybercrime Principle

• Evidence Principle

How many types of cybercrime are there?

• 3

• 2

• 5

• Many

Non-volatile data changes when a system is shut down or unable to power up.

• True

• False

In General, __________________ Involves the investigation of data that can be retrieved from the hard disk or other disks of a computer by applying scientific methods to retrieve the data.

• Network Forensics

• Data Recovery

• Disaster Recovery

• Computer Forensics

There are two types of volatile data. They are _____ and ____

• Computer Information, server information

• System information, network information

• Network information, computer information

• Server information, system information

How do you define forensic computing?

• It is the science of capturing, processing, and investigating data security incidents and making it acceptable to a court of law.

• It is a methodology of guidelines that deals with the process of cyber investigation

• It Is a preliminary and mandatory course necessary to pursue and understand fundamental principles of ethical hacking.

• It is the administrative and legal proceeding in the process of forensic investigation.

At the time of evidence transfer, both sender and receiver need to provide the information about date and time of transfer in what record?

• Evidence record

• Evidence preserving record

• Chain of custody

• Evidence bag