Computer Forensics chapter 1

What is the primary focus of computer forensics?

• Designing networks

• Creating software

• Analyzing digital information

• Recovering lost data

Which agency formed the Computer Analysis and Response Team (CART)?

• CIA

• DOD

• FBI

• NSA

What is the main difference between public and private investigations in computer forensics?

• Public investigations are more expensive

• Private investigations involve government agencies

• Public investigations follow legal guidelines

• Private investigations are always civil cases

What does the term 'chain of custody' refer to in computer forensics?

• The analysis of digital data

• The documentation of evidence handling

• The preservation of original evidence

• The process of collecting evidence

Which of the following is NOT a rule of computer forensics?

• Document any changes in evidence

• Alter evidence to fit the case

• Always prepare a chain of custody

• Minimize examination of original evidence

What is the role of an expert witness in a forensic investigation?

• To create software

• To collect evidence

• To present findings in court

• To analyze data

What is the primary goal of network forensics?

• Secure data storage

• Recover deleted files

• Create network protocols

• Analyze network access

Which of the following best describes the importance of maintaining professional conduct in computer forensics?

• It increases software knowledge

• It reduces investigation time

• It enhances technical skills

• It determines credibility

What is the first stage in the forensic investigation process?

• Presenting findings

• Analyzing data

• Gathering evidence

• Identifying the crime

What is the purpose of a warning banner in corporate investigations?

• To inform employees of their rights

• To establish the right to inspect systems

• To provide technical support

• To advertise company policies