|
Question 1 of 20
|
5.0 Points
|
The first step taken at the majority of crime scenes involves the:
|
A. execution of the search warrant.
|
|
|
B. securing of the crime scene.
|
|
|
C. request for additional assistance.
|
|
|
D. scene processing.
|
|
Reset Selection
|
|
Once a warrant has been served and your team is on the site of a computer-related crime scene:
|
A. the entire scene should be immediately secured.
|
|
|
B. turn off all computers immediately to avoid losing data.
|
|
|
C. all suspects of the crime should be kept in the same room, because they will be easier to contain and watch.
|
|
|
D. non-suspect employees should be allowed to stay at the scene so as not to disrupt their work.
|
|
Reset Selection
|
|
Methods of evidence canvassing include all of the following EXCEPT:
|
A. circular.
|
|
|
B. grid.
|
|
|
C. sector.
|
|
|
D. squaring.
|
|
Reset Selection
|
|
Work spaces littered with food and beverage debris, homemade systems, or an assortment of atypical computer devices may signal:
|
A. that a teenager owns the computer.
|
|
|
B. the presence of a hacker system.
|
|
|
C. knock, notice, and document.
|
|
|
D. scene processing.
|
|
Reset Selection
|
|
Phrack and Activist Times Incorporated are examples of:
|
A. comic books.
|
|
|
B. hacking literature.
|
|
|
C. political magazines.
|
|
|
D. union publications.
|
|
Reset Selection
|
|
Once the scene has been thoroughly secured and all necessary personnel have been employed, the next step in any criminal investigation involves:
|
A. cross-examination.
|
|
|
B. execution of the search warrant.
|
|
|
C. scene processing.
|
|
|
D. war dialers and software cracking programs.
|
|
Reset Selection
|
|
The single most important aspect of scene processing in all cases is:
|
A. the Miranda warnings.
|
|
|
B. intelligence gathering.
|
|
|
C. securing the crime scene.
|
|
|
D. proper documentation.
|
|
Reset Selection
|
|
When conducting your on-scene investigation, it is recommended that:
|
A. the entire process be videotaped and audiotaped.
|
|
|
B. no cameras be allowed on site to avoid giving criminal defense attorneys insight as to what happened at the scene.
|
|
|
C. the investigator record his impressions on a small tape recorder because this is better than making a report.
|
|
|
D. the process be videotaped only, with no audio.
|
|
Reset Selection
|
|
The golden rule for any computer crime investigation is to:
|
A. make sure you have all your facts before applying for a search warrant.
|
|
|
B. document, document, document.
|
|
|
C. make sure your investigators are trained specifically for investigating this type of crime.
|
|
|
D. protect evidence.
|
|
Reset Selection
|
|
Computer-specific things to photograph include all of the following EXCEPT:
|
A. entire system configuration.
|
|
|
B. desks and the area surrounding the computer.
|
|
|
C. printer status.
|
|
|
D. computer screen.
|
|
Reset Selection
|
|
Non-computer-specific things to photograph include all of the following EXCEPT:
|
A. front, back, and sides of the computer.
|
|
|
B. the entire scene.
|
|
|
C. bookshelves.
|
|
|
D. notes and paper products surrounding the computer.
|
|
Reset Selection
|
|
When you are investigating a computer-related crime scene:
|
A. a sketch of the crime scene is essential.
|
|
|
B. a sketch of the crime scene is not necessary because computer crime scenes are vastly different from most other crime scenes.
|
|
|
C. a sketch of the crime scene is optional.
|
|
|
D. a sketch of the crime scene is not necessary because photographs of the crime scene will be taken instead.
|
|
Reset Selection
|
|
When you make a crime scene sketch, you should:
|
A. make a rough sketch first because it cannot be subpoenaed.
|
|
|
B. make sure that everything is drawn to scale.
|
|
|
C. do the original sketch in pencil and don't worry about drawing it to scale.
|
|
|
D. have your original sketch drawn to scale by a licensed architect; otherwise it will not be admissible.
|
|
Reset Selection
|
|
Assuming that the scene has been physically and electronically secured and that there is no immediate threat to human life, investigators should gather __________ evidence prior to seizure of electronic evidence.
|
A. trace
|
|
|
B. critical
|
|
|
C. sophisticated
|
|
|
D. intellectual
|
|
Reset Selection
|
|
The most recognizable of all computer evidence, which includes hard drives, keyboard, monitors, and modems, is categorized as:
|
A. hard evidence.
|
|
|
B. intellectual property.
|
|
|
C. computer components.
|
|
|
D. magnetic tape storage.
|
|
Reset Selection
|
|
Class characteristics of printed material include all of the following EXCEPT:
|
A. laser.
|
|
|
B. ink jet.
|
|
|
C. dot matrix.
|
|
|
D. hard drives.
|
|
Reset Selection
|
|
A good rule of thumb in all computer investigations, especially during the warrant preparation, is to include __________ in the list of items to be searched and/or seized.
|
A. "computer evidence"
|
|
|
B. "hard drives"
|
|
|
C. "magnetic tape storage units"
|
|
|
D. "assorted media"
|
|
Reset Selection
|
|
To locate passwords on a seized computer, try all of the following EXCEPT:
|
A. looking on the monitor.
|
|
|
B. checking underneath the keyboard.
|
|
|
C. searching wallets or purses.
|
|
|
D. listening to voicemail messages.
|
|
Reset Selection
|
|
When you are searching for evidence at a computer-related crime scene:
|
A. you can skip peripherals such as scanners and printers.
|
|
|
B. don't overlook printers, which may contain information that can be retrieved.
|
|
|
C. your search warrant will only allow you to seize the computer itself.
|
|
|
D. you may seize and take everything in the room, regardless of what it is or to whom it belongs.
|
|
Reset Selection
|
|
When preserving evidence seized from a computer related crime scene:
|
A. remember that traditional methods are best, so adhere to them strictly.
|
|
|
B. try to keep computer evidence where it will receive heat or direct sunlight because this will inhibit deterioration.
|
|
|
C. chain of custody does not have to be proven because any damaging evidence is safe on the computer's hard drive.
|
|
|
D. don't put evidence in plastic bags, which may generate static electricity and ruin the evidence.
|
|
Reset Selection
|