Cyber Forensics (20/03/2023)/S2

Jurisdiction claims may be based on:

• Location of the perpetrator’s computer

• Location of the victim’s computer

• Location of intermediary computers

• All of the above

Who is authorized to conduct online undercover investigations when child pornography is involved?

• Anyone

• Computer security professionals

• Journalists

• Law enforcement

The _____________ documentation specifies who handled the evidence, when, where, and for what purpose.

• Evidence inventory

• Chain of custody

• Evidence intake

• Preservation notes

A HDD, the smallest addressable unit of data, generally consists of:

• 8 bits

• 528 MB

• 64KB

• 512 bytes

Which is not the most popular software of forensic tools?

• Forensic toolkit

• Quicken

• SMART

• Forensic autopsy

Direct evidence establishes a:

• Fact

• Assumption

• Error

• Line of inquiry

Which is the area that begins at the end of the last sector that contains logical data and terminates at the end of the cluster?

• ROM slack

• RAM slack

• HDD slack

• File slack

If you provide a text, a drive is prepared in three processes. The processes do not include:

• Low-level formatting

• Formatting

• High-level formatting

• Partitioning

Stolen bank account information is an example of:

• Hardware as contraband or fruits of crime

• Information as contraband or fruits of crime

• Information as an instrumentality

• Information as evidence

The ___________ will assure the accuracy of digital evidence needed during later stages of the investigation.

• Original digital evidence

• Metadata

• Hash value

• Compressed function