Cyber Security

profilecjpnwe
assignment_6.docx

Question 1 of 20

5.0 Points

The first step taken at the majority of crime scenes involves the:

A. execution of the search warrant.

B. securing of the crime scene.

C. request for additional assistance.

D. scene processing.

Reset Selection

Question 2 of 20

5.0 Points

Once a warrant has been served and your team is on the site of a computer-related crime scene:

A. the entire scene should be immediately secured.

B. turn off all computers immediately to avoid losing data.

C. all suspects of the crime should be kept in the same room, because they will be easier to contain and watch.

D. non-suspect employees should be allowed to stay at the scene so as not to disrupt their work.

Reset Selection

Question 3 of 20

5.0 Points

Methods of evidence canvassing include all of the following EXCEPT:

A. circular.

B. grid.

C. sector.

D. squaring.

Reset Selection

Question 4 of 20

5.0 Points

Work spaces littered with food and beverage debris, homemade systems, or an assortment of atypical computer devices may signal:

A. that a teenager owns the computer.

B. the presence of a hacker system.

C. knock, notice, and document.

D. scene processing.

Reset Selection

Question 5 of 20

5.0 Points

Phrack and Activist Times Incorporated are examples of:

A. comic books.

B. hacking literature.

C. political magazines.

D. union publications.

Reset Selection

Question 6 of 20

5.0 Points

Once the scene has been thoroughly secured and all necessary personnel have been employed, the next step in any criminal investigation involves:

A. cross-examination.

B. execution of the search warrant.

C. scene processing.

D. war dialers and software cracking programs.

Reset Selection

Question 7 of 20

5.0 Points

The single most important aspect of scene processing in all cases is:

A. the Miranda warnings.

B. intelligence gathering.

C. securing the crime scene.

D. proper documentation.

Reset Selection

Question 8 of 20

5.0 Points

When conducting your on-scene investigation, it is recommended that:

A. the entire process be videotaped and audiotaped.

B. no cameras be allowed on site to avoid giving criminal defense attorneys insight as to what happened at the scene.

C. the investigator record his impressions on a small tape recorder because this is better than making a report.

D. the process be videotaped only, with no audio.

Reset Selection

Question 9 of 20

5.0 Points

The golden rule for any computer crime investigation is to:

A. make sure you have all your facts before applying for a search warrant.

B. document, document, document.

C. make sure your investigators are trained specifically for investigating this type of crime.

D. protect evidence.

Reset Selection

Question 10 of 20

5.0 Points

Computer-specific things to photograph include all of the following EXCEPT:

A. entire system configuration.

B. desks and the area surrounding the computer.

C. printer status.

D. computer screen.

Reset Selection

Question 11 of 20

5.0 Points

Non-computer-specific things to photograph include all of the following EXCEPT:

A. front, back, and sides of the computer.

B. the entire scene.

C. bookshelves.

D. notes and paper products surrounding the computer.

Reset Selection

Question 12 of 20

5.0 Points

When you are investigating a computer-related crime scene:

A. a sketch of the crime scene is essential.

B. a sketch of the crime scene is not necessary because computer crime scenes are vastly different from most other crime scenes.

C. a sketch of the crime scene is optional.

D. a sketch of the crime scene is not necessary because photographs of the crime scene will be taken instead.

Reset Selection

Question 13 of 20

5.0 Points

When you make a crime scene sketch, you should:

A. make a rough sketch first because it cannot be subpoenaed.

B. make sure that everything is drawn to scale.

C. do the original sketch in pencil and don't worry about drawing it to scale.

D. have your original sketch drawn to scale by a licensed architect; otherwise it will not be admissible.

Reset Selection

Question 14 of 20

5.0 Points

Assuming that the scene has been physically and electronically secured and that there is no immediate threat to human life, investigators should gather __________ evidence prior to seizure of electronic evidence.

A. trace

B. critical

C. sophisticated

D. intellectual

Reset Selection

Question 15 of 20

5.0 Points

The most recognizable of all computer evidence, which includes hard drives, keyboard, monitors, and modems, is categorized as:

A. hard evidence.

B. intellectual property.

C. computer components.

D. magnetic tape storage.

Reset Selection

Question 16 of 20

5.0 Points

Class characteristics of printed material include all of the following EXCEPT:

A. laser.

B. ink jet.

C. dot matrix.

D. hard drives.

Reset Selection

Question 17 of 20

5.0 Points

A good rule of thumb in all computer investigations, especially during the warrant preparation, is to include __________ in the list of items to be searched and/or seized.

A. "computer evidence"

B. "hard drives"

C. "magnetic tape storage units"

D. "assorted media"

Reset Selection

Question 18 of 20

5.0 Points

To locate passwords on a seized computer, try all of the following EXCEPT:

A. looking on the monitor.

B. checking underneath the keyboard.

C. searching wallets or purses.

D. listening to voicemail messages.

Reset Selection

Question 19 of 20

5.0 Points

When you are searching for evidence at a computer-related crime scene:

A. you can skip peripherals such as scanners and printers.

B. don't overlook printers, which may contain information that can be retrieved.

C. your search warrant will only allow you to seize the computer itself.

D. you may seize and take everything in the room, regardless of what it is or to whom it belongs.

Reset Selection

Question 20 of 20

5.0 Points

When preserving evidence seized from a computer related crime scene:

A. remember that traditional methods are best, so adhere to them strictly.

B. try to keep computer evidence where it will receive heat or direct sunlight because this will inhibit deterioration.

C. chain of custody does not have to be proven because any damaging evidence is safe on the computer's hard drive.

D. don't put evidence in plastic bags, which may generate static electricity and ruin the evidence.

Reset Selection