What does digital evidence include?
Answer: Desktop computer and surveillance equipment
What does digital evidence include?
Answer: Desktop computer and surveillance equipment
Answer: Desktop computer and surveillance equipment
What is an identifying number that is associated with a computer?
What is an identifying number that is associated with a computer?
Answer: IP address
What are crimes where the computer system is the target?
What are crimes where the computer system is the target?
Answer: Cyber-attacks
What are some of the ways that prescription fraud comes to the attention of the police?
What are some of the ways that prescription fraud comes to the attention of the police?
Answer: Third-party notifications, police discovery, and doctor's office or pharmacy reports
What are the second most common form of drug abuse that is often not reported to the police?
What are the second most common form of drug abuse that is often not reported to the police?
Answer: Prescription drugs
What involves using some else's personal information to assume that person's identity in daily life?
What involves using some else's personal information to assume that person's identity in daily life?
Answer: Identity cloning
What is illegally obtained money being invested in a legitimate corporation to hide the original source of the money?
What is illegally obtained money being invested in a legitimate corporation to hide the original source of the money?
Answer: Money laundering
What refers to all the ways a person can falsely represent a fact in order to get someone to surrender something of value?
What refers to all the ways a person can falsely represent a fact in order to get someone to surrender something of value?
Answer: Fraud
What are the classifications for the cause of a fire?
What are the classifications for the cause of a fire?
Answer: Natural, accidental, suspicious, and incendiary
Who is most likely out of all types of burglars to work alone?
Who is most likely out of all types of burglars to work alone?
Answer: Midrange burglar
Who commits their crimes spontaneously, which results in being poorly planned?
Who commits their crimes spontaneously, which results in being poorly planned?
Answer: Novice burglar
What are common places to find evidence in a burglary?
What are common places to find evidence in a burglary?
Answer: The point of entry and exit
Who often talks about their crimes as a status enhancement?
Who often talks about their crimes as a status enhancement?
Answer: Juveniles
What are examples of larceny theft?
What are examples of larceny theft?
Answer: Theft from a motor vehicle, shoplifting, pocket picking, and theft of bicycles.
What percentage of fires overall have been a result of arson?
What percentage of fires overall have been a result of arson?
Answer: 16%
What is the clearance rate for burglaries approximately?
What is the clearance rate for burglaries approximately?
Answer: 13%
Why do robbers take cell phones?
Why do robbers take cell phones?
Answer: To prevent the victim from calling the police, To hurt the victim by taking the most meaningful possession they own, To identify the victim so that they can attack the same person again, and it has monetary value
What is the most effective approach in the interrogation of robbery suspects?
What is the most effective approach in the interrogation of robbery suspects?
Answer: Nonemotional approach
What can link robberies to one offender, clear crimes, and provide further clues to the characteristics of one offender?
What can link robberies to one offender, clear crimes, and provide further clues to the characteristics of one offender?
Answer: An offender's modus operandi
What is often the best evidence available in robberies?
What is often the best evidence available in robberies?
Answer: Eyewitness testimony
What includes convenience store robberies and bank robberies?
What includes convenience store robberies and bank robberies?
Answer: Commercial robberies
What type of robberies are the most common?
What type of robberies are the most common?
Answer: Street robberies
What usually involves more than one person, a weapon, a disguise, and the use of a getaway car?
What usually involves more than one person, a weapon, a disguise, and the use of a getaway car?
Answer: Well planned robbery
Of all violent crimes, what are the least likely to involve victims and offenders who know each other?
Of all violent crimes, what are the least likely to involve victims and offenders who know each other?
Answer: Robberies
Search and seizure procedures for mobile devices are as important as procedures for computers.
Search and seizure procedures for mobile devices are as important as procedures for computers.
a. true
b. false
Answer: a. true
While travelling internationally with a GSM phone, you can pop in a SIM card for the country you're currently in, rather than get a new phone.
While travelling internationally with a GSM phone, you can pop in a SIM card for the country you're currently in, rather than get a new phone.
a. true
b. false
Answer: a. true
Most Code Division Multiple Access networks conform to IS-95. The systems are referred to as CDMAOne, and when they went to 3G service, they became CDMAThree.
Most Code Division Multiple Access networks conform to IS-95. The systems are referred to as CDMAOne, and when they went to 3G service, they became CDMAThree.
a. true
b. false
Answer: b. false
Because mobile phones are seized at the time of arrest, a search warrant is not necessary to examine the device for information.
Because mobile phones are seized at the time of arrest, a search warrant is not necessary to examine the device for information.
a. true
b. false
Answer: b. false
The use of smart phones for illicit activities is becoming more prevalent.
The use of smart phones for illicit activities is becoming more prevalent.
a. true
b. false
Answer: a. True
Most Code Division Multiple Access (CDMA) networks conform to ____ , created by the Telecommunications Industry Association (TIA).
Most Code Division Multiple Access (CDMA) networks conform to ____ , created by the Telecommunications Industry Association (TIA).
a. TS-95
b. 802.11
c. IS-95
d. IS-136
Answer: c. IS-95
Which component of cell communication is used to route digital packets for the network and relies on
Which component of cell communication is used to route digital packets for the network and relies on
a database to support subscribers
a. Base station controller (BSC)
b. Base transceiver station (BTS)
c. Base transceiver controller (BTC)
d. Mobile switching center (MSC)
Answer: d. Mobile switching center (MSC)
Which of the following is not a type of peripheral memory card used in PDAs
Which of the following is not a type of peripheral memory card used in PDAs
a. Secure Digital (SD)
b. Compact Flash (CF)
c. Multimedia Card (MMC)
d. RamBus (RB)
Answer: d. RamBus (RB)
The ______ technology uses the IEEE 802.16e standard and Orthogonal Frequency Division Multiple Access (OFDMA) and supports transmission speeds of 12 Mbps.
The ______ technology uses the IEEE 802.16e standard and Orthogonal Frequency Division Multiple Access (OFDMA) and supports transmission speeds of 12 Mbps.
a. WiMAX
b. CDMA
c. UMB
d. MIMO
Answer: a. WiMAX
Where is the OS stored on a smartphone
Where is the OS stored on a smartphone
a. RAM
b. Microprocessor
c. ROM
d. Read/write flash
Answer: c. ROM
On what mobile device platform does Facebook use a SQLite database containing friends, their ID numbers, and phone numbers as well as files that tracked all uploads, including pictures.
On what mobile device platform does Facebook use a SQLite database containing friends, their ID numbers, and phone numbers as well as files that tracked all uploads, including pictures.
a. Android
b. Blackberry
c. Windows RT
d. iPhone
Answer: d. iPhone
Within NIST guidelines for mobile forensics methods, the _____ method requires physically removing flash memory chips and gathering information at the binary level.
Within NIST guidelines for mobile forensics methods, the _____ method requires physically removing flash memory chips and gathering information at the binary level.
a. Chip-off
b. Logical extraction
c. Micro read
d. Manual extraction
Answer: a. Chip-off
What standard introduced sleep mode to enhance battery life, and is used with TDMA?
What standard introduced sleep mode to enhance battery life, and is used with TDMA?
a. IS-99
b. IS-140
c. IS-136
d. IS-95
Answer: c. IS-136
Select below the option that is not a typical feature of smartphones on the market today:
Select below the option that is not a typical feature of smartphones on the market today:
a. Microprocessor
b. Flash
c. ROM
d. Hard drive
Answer: d. Hard drive
What method below is NOT an effective method for isolating a mobile device from receiving signals
What method below is NOT an effective method for isolating a mobile device from receiving signals
a. placing the device into a plastic evidence bag
b. placing the device into a paint can, preferable one previously containing radio-wave blocking paint
c. placing the device into airplane mode
d. turning the device off
Answer: a. placing the device into a plastic evidence bag
What type of mobile forensics method listed by NIST guidelines involves looking at a device's content page by page and taking pictures
What type of mobile forensics method listed by NIST guidelines involves looking at a device's content page by page and taking pictures
a. Manual extraction
b. Chip-off
c. Micro read
d. Logical extraction
Answer: a. Manual extraction
What digital network technology was developed during World War II
What digital network technology was developed during World War II
a. TDMA
b. CDMA
c. GSM
d. iDEN
Answer: b. CDMA
GSM refers to mobile phones as "mobile stations" and divides a station into two parts, the __________ and the mobile equipment (ME).
GSM refers to mobile phones as "mobile stations" and divides a station into two parts, the __________ and the mobile equipment (ME).
a. antenna
b. SIM card
c. radio
d. transceiver
Answer: b. SIM card
Which of the NIST guidelines below requires using a modified boot loader to access RAM for analysis
Which of the NIST guidelines below requires using a modified boot loader to access RAM for analysis
a. Chip-off
b. Manual extraction
c. Hex dumping
d. Micro read
Answer: c. Hex dumping
The _______ technology is designed for GSM and Universal Mobile Telecommunications Systems (UMTS) technology, supports 45 Mbps to 144 Mbps transmission speeds.
The _______ technology is designed for GSM and Universal Mobile Telecommunications Systems (UMTS) technology, supports 45 Mbps to 144 Mbps transmission speeds.
a. WiMAX
b. LTE
c. MIMO
d. UMB
Answer: b. LTE
Nonvolatile memory on a mobile device can contain OS files and stored user data, such as a _____ and backed-up files.
Nonvolatile memory on a mobile device can contain OS files and stored user data, such as a _____ and backed-up files.
a. Professional Data Holder
b. Personal Assistant Organizer
c. Personal Data Manager
d. Personal Information Manager
Answer: d. Personal Information Manager
What organization is responsible for the creation of the requirements for carriers to be considered 4G
What organization is responsible for the creation of the requirements for carriers to be considered 4G
a. IEEE
b. ITU-R
c. ISO
d. TIA
Answer: b. ITU-R
The _______ component is made up of radio transceiver equipment that defines cells and communicates with mobile phones; sometimes referred to as a "cell phone tower".
The _______ component is made up of radio transceiver equipment that defines cells and communicates with mobile phones; sometimes referred to as a "cell phone tower".
a. Vase station controller (BSC)
b. Mobile switching center (MSC)
c. Base transceiver controller (BTC)
d. Base transceiver station (BTS)
Answer: d. Base transceiver station (BTS)
What digital network technology is a digital version of the original analog standard for cell phones
What digital network technology is a digital version of the original analog standard for cell phones
a. GSM
b. CDMA
c. iDEN
d. D-AMPS
Answer: d. D-AMPS
What frequencies can be used by GSM with the TDMA technique
What frequencies can be used by GSM with the TDMA technique
a. 1200 to 1500 MHz
b. 2.4 GHz to 5.0 GHZ
c. 600 to 1000 MHz
d. 800 to 1000 MHZ
Answer: d. 800 to 1000 MHZ
When investigating social media content, evidence artifacts can vary, depending on the social media channel and the device. True/False
When investigating social media content, evidence artifacts can vary, depending on the social media channel and the device. True/False
Answer: True
In which of the following cases did the U.S. Supreme Court require using a search warrant to examine the contents of mobile devices
In which of the following cases did the U.S. Supreme Court require using a search warrant to examine the contents of mobile devices
a. Miles v. North Dakota
b. Smith v. Oregon
c. Riley v. California
d. Dearborn v. Ohio
Answer: c. Riley v California
Remote wiping of a mobile device can result in which of the following (Choose all that apply)
Remote wiping of a mobile device can result in which of the following (Choose all that apply)
a. Removing account information
b. Enabling GPS beacon to track the thief
c. Returning the phone to the original factory settings
d. Deleting contacts
Answer:
a. Removing account information
c. Returning the phone to the original factory settings
d. Deleting contacts
When acquiring a mobile device at an investigation scene, you should leave it connected to a PC so that you can observe synchronization as it takes place. True/False
When acquiring a mobile device at an investigation scene, you should leave it connected to a PC so that you can observe synchronization as it takes place. True/False
Answer: False
SIM card readers can alter evidence by showing that a message has been read when you view it True/False
SIM card readers can alter evidence by showing that a message has been read when you view it True/False
Answer: True
Which of the following categories of information is stored on a SIM card (Choose all that apply.)
Which of the following categories of information is stored on a SIM card (Choose all that apply.)
a. Volatile Memory
b. Call data
c. Service-related data
d. None of the above
b. Call data
Answer: c. Service-related data
SD cards have a capacity up to which of the following
SD cards have a capacity up to which of the following
a. 100 MB
b. 4 MB
c. 64 GB
d. 500 MB
Answer: c. 64 GB
Which of the following relies on a central database that tracks across data, location data and subscriber information
Which of the following relies on a central database that tracks across data, location data and subscriber information
a. BTS
b. MSC
c. BSC
d. None of the above
Answer: b. MSC
The term TDMA refers to which of the following (Choose all that apply)
The term TDMA refers to which of the following (Choose all that apply)
a. A technique of dividing a radio frequent so that multiple users share the same channel
b. A proprietary protocol developed by Motorola
c. A specific cellular network standard
d. A technique of spreading the signal across many channels
a. A technique of dividing a radio frequent so that multiple users share the same channel
Answer: c. A specific cellular network standard.
Typically, you need a search warrant to retrieve information from a service provider. True/False.
Typically, you need a search warrant to retrieve information from a service provider. True/False.
Answer: True
Which service below does not put log information into /var/log/maillog
Which service below does not put log information into /var/log/maillog
a. SMTP
b. Exchange
c. IMAP
d. POP
Answer: b. Exchange
Select the program below that can be used to analyze mail from Outlook, Thunderbird, and Eudora
Select the program below that can be used to analyze mail from Outlook, Thunderbird, and Eudora
a. AccessData FTK
b. DataNumen
c. R-Tools R-Mail
d. Fookes Aid4Mail
Answer: d. Fookes Aid4Mail
In order to retrieve logs from exchange, the Powershell cmdlet can be used
In order to retrieve logs from exchange, the Powershell cmdlet can be used
a. GetExchangeLogs.psl
b. GetLogInfo.psl
c. ShowExchangeHistrory.psl
d. GetTransactionLogStats.psl
Answer: d. GetTransactionLogStats.psl
The Suni Munshani v. Singal Lake Venture Fund II, LP et al case is an example of a case that involves e-mail
The Suni Munshani v. Singal Lake Venture Fund II, LP et al case is an example of a case that involves e-mail
a. destruction
b. spamming
c. spoofing
d. theft
Answer: c. spoofing
Exchange uses and Exchange database and is based on the , which uses several files in different combinations to provide e-mail service
Exchange uses and Exchange database and is based on the , which uses several files in different combinations to provide e-mail service
a. Microsoft Mail Storage Engine (MSE)
b. Microsoft Stored Mail Extension (SME)
c. Microsoft Extended Mail Storage (EMS)
d. Microsoft Extensible Storage Engine (ESE)
Answer: d. Microsoft Extensible Storage Engine (ESE)
Which e-mail recovery program below can recover files from VMware and VirtualPC virtual machines, as well as ISOs and other types of file backups
Which e-mail recovery program below can recover files from VMware and VirtualPC virtual machines, as well as ISOs and other types of file backups
a. Fookes Aid4mail
b. DataNumen Outlook Repair
c. EnCase Forensics
d. AccessData FTK
Answer: b. DataNumen Outlook Repair
What service below can be used to map an IP address to a domain name, and then find the domain name's point of contact
What service below can be used to map an IP address to a domain name, and then find the domain name's point of contact
a. iNet
b. ARIN
c. Google
d. ERIN
Answer: b. ARIN
In what state is sending unsolicited email illegal
In what state is sending unsolicited email illegal
a. Florida
b. Washington
c. Maine
d. New York
Answer: b. Washington
Which option below is the correct path to the sendmail configuration file
Which option below is the correct path to the sendmail configuration file
a. /var/etc/sendmail.cf
b. /var/mail/sendmail.cf
c. /usr/local/sendmail.cf
d. /etc/mail/sendmail.cf
Answer: d. /etc/mail/sendmail.cf
What type of Facebook profile is usually only given to law enforcement with a warrant
What type of Facebook profile is usually only given to law enforcement with a warrant
a. private profile
b. advanced profile
c. basic profile
d.Neoprint profile
Answer: d.Neoprint profile
In older versions of exchange, what type of file was responsible for massages formatted with Messaging Application Programming Interface, and served as the database file
In older versions of exchange, what type of file was responsible for massages formatted with Messaging Application Programming Interface, and served as the database file
a. .ost
b. edp
c. .edb
d. .edi
Answer: c. .edb
What information is not typically included in an e-mail header
What information is not typically included in an e-mail header
a. the sender's physical location
b. the originating IP address
c. the unique ID of the e-mail
d. the originating domain
Answer: a. the sender's physical location
One of the most noteworthy e-mail scams was 419, otherwise known as the
One of the most noteworthy e-mail scams was 419, otherwise known as the
a. Nigerian Scam
b. Lake Venture Scam
c. Conficker virus
d. Iloveyou Scam
Answer: a. Nigerian Scam
Where does the Postfix UNIX mail server store e-mail
Where does the Postfix UNIX mail server store e-mail
a. /home/username/mail
b. /var/mail/postfix
c. /var/spool/postfix
d. /etc/postfix
Answer: c. /var/spool/postfix
On a UNIX system, where is a user's mail stored by default
On a UNIX system, where is a user's mail stored by default
a. /var/mail
b. /var/log/mail
c. /username/mail
d. /home/username/mail
Answer: d. /home/username/mail
What kind of files are created by Exchange while converting binary data to readable text in order to prevent loss of data
What kind of files are created by Exchange while converting binary data to readable text in order to prevent loss of data
a. .txt
b. .tmp
c. .exe
d. .log
Answer: b. .tmp
Syslog is generally configured to put all e-mail related log information into what file
Syslog is generally configured to put all e-mail related log information into what file
a. /usr/log/mail.log
b. /var/log/message
c. /proc/mail
d. /var/log/maillog
Answer: d. /var/log/maillog
Subscribe to:
Posts (Atom)