Written 2

1. What is computer forensics? 

2. What are the major differences between public and private investigations? 

3. What are the similarities and differences between criminal and civil law? 

4. Why do administrative agencies conduct investigations?
5. Describe the computer forensics process.
6. When should a search be conducted on site? 

7. When should a search be conducted off site? 

8. What is slack space?
9. Which different types of evidence exist? 

10. What is the difference between circumstantial and direct evidence? 11. When is hearsay evidence admissible in court?
12. How can electronic evidence be authenticated?
13. What are the standards of evidence? 

4 pages