After the evidence has been presented in a trial by jury, the jury must deliver a(n) ________

After the evidence has been presented in a trial by jury, the jury must deliver a(n) ________

a. exhibit
b. affidavit
c. allegation
d. verdict

Answer: D

________ must be included in an affidavit to support an allegation in order to justify a warrant.

________ must be included in an affidavit to support an allegation in order to justify a warrant.

a. verdicts
b. witnesses
c. exhibits
d. subpoenas

Answer: C

The term ________ describes a database containing information records about crimes that have been committed previously by a criminal.

The term ________ describes a database containing information records about crimes that have been committed previously by a criminal.

a. police ledger
b. police blotter
c. police blogger
d. police recorder

Answer: B

What tool, currently maintained by the IRS criminal investigation division and limited to use by law enforcement, can analyze and read special files that are copies of a disk?

What tool, currently maintained by the IRS criminal investigation division and limited to use by law enforcement, can analyze and read special files that are copies of a disk?

a. AccessData forensic toolkit
b. DeepScan
c. ILook
d. Photorect

Answer: C

An evidence custody form does not usually contain ________

An evidence custody form does not usually contain ________

a. the nature of the case
b. a description of evidence
c. vendor names for computer components
d. a witness list

Answer: D

A chain-of-evidence form, which is used to document what has and had not been done with the original evidence and forensic copies of the evidence, is also known as a(n) ________

A chain-of-evidence form, which is used to document what has and had not been done with the original evidence and forensic copies of the evidence, is also known as a(n) ________

a. single-evidence form
b. multi-evidence form
c. evidence custody form
d. evidence tracking form

Answer: C

Which option below is not a standard systems analysis step?

Which option below is not a standard systems analysis step?

a. determine a preliminary design or approach to the case.
b. obtain and copy an evidence drive
c. share evidence with experts outside of the investigation
d. mitigate or minimize the risks

Answer: C

The sale of sensitive or confidential company information to a competitor is known as ________

The sale of sensitive or confidential company information to a competitor is known as ________

a. industrial sabotage
b. industrial espionage
c. industrial collusion
d. industrial betrayal

Answer: B

The ________ is responsible for analyzing data and determining when another specialist should be called in to assist with analysis.

The ________ is responsible for analyzing data and determining when another specialist should be called in to assist with analysis.

a. digital evidence recorder
b. digital evidence specialist
c. digital evidence analyst
d. digital evidence examiner

Answer: B

After a judge approves and signs a search warrant, the ________ is responsible for the collection of evidence as defined by the warrant.

After a judge approves and signs a search warrant, the ________ is responsible for the collection of evidence as defined by the warrant.

a. digital evidence recorder
b. digital evidence specialist
c. digital evidence first responder
d. digital evidence scene investigator

Answer: C

The ________ is not one of the three stages of a typical criminal case.

The ________ is not one of the three stages of a typical criminal case.

a. complaint
b. investigation
c. civil suit
d. prosecution

Answer: C

In what year was the computer fraud and abuse act passed?

In what year was the computer fraud and abuse act passed?

a. 1976
b. 1980
c. 1986
d. 1996

Answer: C

________ is not one of the functions of the investigations triad.

________ is not one of the functions of the investigations triad.

a. digital investigations
b. data recovery
c. vulnerability threat assessment and risk management
d. network intrusion detection and incident response

Answer: B

________ describes an accusation of fact that a crime has been committed.

________ describes an accusation of fact that a crime has been committed.

a. attrition
b. attribution
c. allegation
d. assignment

Answer: C

If a police officer or investigator has sufficient cause to support a search warrant, the prosecuting attorney might direct him or her to submit a(n) ________

If a police officer or investigator has sufficient cause to support a search warrant, the prosecuting attorney might direct him or her to submit a(n) ________

a. exhibit
b. verdict
c. affidavit
d. memo

Answer: C

Within a computing investigation, the ability to perform a series of steps again and again to produce the same results is known as ________

Within a computing investigation, the ability to perform a series of steps again and again to produce the same results is known as ________

a. repeatable findings
b. reloadable steps
c. verifiable reporting
d. evidence reporting

Answer: A

________ is not recommended for a digital forensics workstation.

________ is not recommended for a digital forensics workstation.

a. a text editor tool
b. a write-blocker device
c. an SCSI card
d. remote access software

Answer: D

Which Microsoft OS below is the least intrusive to disks in terms of changing data?

Which Microsoft OS below is the least intrusive to disks in terms of changing data?

a. windows 95
b. windows xp
c. windows 7
d. ms-dos 6.22

Answer: D

Which amendment to the U.S. Constitution protects everyone's right to be secure in their person, residence, and property from search and seizure?

Which amendment to the U.S. Constitution protects everyone's right to be secure in their person, residence, and property from search and seizure?

a. first amendment
b. second amendment
c. fourth amendment
d. fifth amendment

Answer: C

Signed into law in 1973, the _____ was/were created to ensure consistency in federal proceedings.

Signed into law in 1973, the _____ was/were created to ensure consistency in federal proceedings. 

a. federal proceeding law
b. federal rules of evidence
c. federal consistency standards
d. federal proceedings rules

Answer: B.