Legal Compliance in Computer Forensics DFE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which legal requirement for digital evidence ensures that the evidence is what it purports to be and has not been altered or substituted?

   • AReliability
   • BRelevance
   • CHearsay
   • DAuthenticity
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In the United States, which federal rule primarily governs the admissibility of digital evidence in federal court proceedings?

   • AThe Digital Millennium Copyright Act (DMCA)
   • BThe Federal Rules of Evidence (FRE)
   • CThe Electronic Communications Privacy Act (ECPA)
   • DThe Computer Fraud and Abuse Act (CFAA)
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A forensic investigator is working on a case that involves a suspect who is a foreign diplomat. The suspect enjoys diplomatic immunity in the host country. The investigator has obtained a search warrant from the host country's court. The suspect's laptop contains evidence of a crime. What is the most important legal consideration for the investigator?

   • ADiplomatic immunity may prevent the execution of the search warrant, and the investigator must follow international law and diplomatic protocols.
   • BThe search warrant is valid and can be executed regardless of diplomatic immunity.
   • CThe investigator can seize the laptop and analyze it, but cannot arrest the diplomat.
   • DThe investigator should ignore the diplomatic immunity and proceed with the search, as the crime is serious.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which compliance obligation requires forensic investigators to preserve all relevant evidence and documentation for a specified period, even after the investigation is complete?

   • AIncident response plan
   • BChain of custody form
   • CData minimization policy
   • DEvidence retention policy
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A forensic examiner is asked to analyze a smartphone that belongs to a victim of a cyberstalking case. The victim has given verbal consent, but the examiner notices the phone contains messages from third parties. The examiner wants to include those messages in the report. What should the examiner do to ensure the evidence is legally sound?

   • AObtain written consent from the victim that explicitly covers the examination and disclosure of all data on the phone.
   • BRedact all third-party messages before including them in the report.
   • CSeek a court order to compel the phone's carrier to provide the messages.
   • DProceed with the analysis because the victim's verbal consent is sufficient for all data on the phone.
   Reveal Solution Discussion Select an answer first