Computer Forensics CCT Practice Questions (Page 11)

Questions 51–55

1. 51foundation · easy

   What is the primary source of evidence in network forensics?

   • AThe physical memory of a server
   • BNetwork traffic captures and logs
   • CThe contents of a suspect's hard drive
   • DThe SIM card of a mobile device
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   Which of the following is a key element that must be recorded in a chain of custody log?

   • AThe date and time of each transfer of custody
   • BThe weather conditions at the time of collection
   • CThe IP address of the investigator's computer
   • DThe brand of the forensic tool used
   Reveal Solution Discussion Select an answer first
4. 53foundation · easy

   What is the primary purpose of a chain of custody?

   • ATo determine the legal jurisdiction of the case
   • BTo document every person who handled the evidence and when
   • CTo analyze evidence using forensic tools
   • DTo store evidence in a secure location
   Reveal Solution Discussion Select an answer first
5. 54application · medium

   An investigator is examining a disk image and finds a file that appears to be a JPEG image, but the file's header has been altered. What anti-forensic technique is most likely being used?

   • ASteganography
   • BEncryption
   • CFile signature manipulation
   • DData hiding in slack space
   Reveal Solution Discussion Select an answer first
6. 55expert · hard

   A forensic examiner has completed an investigation and must write a report that will be used in a civil lawsuit. The report must be clear enough for a non-technical judge and jury. What is the most important consideration when writing the report?

   • AInclude every technical detail and tool output to demonstrate thoroughness.
   • BFocus on the investigator's opinion about the case.
   • CKeep the report brief and avoid explaining methods.
   • DUse plain language and explain technical terms in a glossary.
   Reveal Solution Discussion Select an answer first