Computer Forensics in Today's World CHFI Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A forensic examiner is asked to investigate a case of alleged intellectual property theft. The examiner is a former employee of the company and has personal relationships with some of the suspects. What is the most appropriate action for the examiner?

   • AProceed with the investigation but disclose the relationship to the client.
   • BDecline the case due to a conflict of interest.
   • CProceed with the investigation and keep the relationship confidential.
   • DAsk a colleague to perform the investigation while the examiner supervises.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which scenario best illustrates the need for computer forensics?

   • AAn organization is upgrading its server hardware.
   • BA company wants to improve its website's user interface.
   • CA developer is writing a new mobile application.
   • DAn employee is suspected of leaking confidential documents, and the company needs to determine what was accessed.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   During a fraud investigation, an examiner finds a spreadsheet with financial records and a chat log discussing the fraud. Which statement best describes the nature of this digital evidence?

   • AThe spreadsheet is evidence, but the chat log is not because it is not a business document.
   • BThe chat log is only available if the chat application is still running.
   • CBoth are persistent evidence stored on the hard drive and can be recovered after power-off.
   • DBoth are volatile evidence that will be lost when the computer is turned off.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is a current trend in computer forensics?

   • AInvestigating data stored in cloud environments.
   • BEliminating the need for human investigators.
   • CRestricting forensics to law enforcement only.
   • DFocusing exclusively on floppy disk analysis.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which legal principle is fundamental to computer forensics?

   • AForensic analysis must be completed within 24 hours.
   • BEvidence must be preserved in its original state to be admissible in court.
   • CInvestigators are allowed to access any device without a warrant.
   • DDigital evidence is always considered hearsay.
   Reveal Solution Discussion Select an answer first