Legal Compliance in Computer Forensics DFE Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A forensic investigator is documenting the chain of custody for a USB drive that was found at a crime scene. The drive was initially handled by a police officer, then by a forensic technician, and then by the investigator. The officer did not record the time of discovery. What is the most significant risk?

   • AThe USB drive may contain malware.
   • BThe defense may argue that the evidence could have been tampered with before it was documented.
   • CThe investigator may not be able to read the drive.
   • DThe USB drive may be damaged.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   In the context of digital evidence admissibility, what does the 'reliability' requirement primarily assess?

   • AWhether the evidence was obtained using a legally authorized search warrant
   • BWhether the evidence is relevant to the case
   • CWhether the methods and processes used to collect and analyze the evidence are scientifically valid and trustworthy
   • DWhether the evidence is in its original form
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An investigator is preparing a report for a civil litigation case. The report includes findings from a forensic image of a hard drive. To ensure the evidence is admissible, what should the investigator include in the report?

   • AThe suspect's personal opinions about the case.
   • BOnly the final conclusions, to avoid confusing the court.
   • CA detailed description of the tools and methods used, including hash values.
   • DA list of all files deleted from the drive.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which international agreement is specifically designed to facilitate cross-border cooperation in fighting cybercrime and provides a framework for mutual legal assistance in digital evidence collection?

   • AThe General Data Protection Regulation (GDPR)
   • BThe Budapest Convention on Cybercrime
   • CThe Sarbanes-Oxley Act (SOX)
   • DThe ISO/IEC 27037 standard
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A forensic investigator is working on a case that involves a database containing personal data of individuals from multiple countries, including the EU and the US. The investigator needs to transfer a subset of the data to a forensic lab in a third country for analysis. The third country does not have an EU adequacy decision. The investigator has obtained consent from the data subjects. Which additional measure is most likely required to ensure GDPR compliance?

   • ARely solely on the data subjects' consent, as it is a valid legal basis for the transfer.
   • BTransfer the data only to a lab within the EU to avoid the need for safeguards.
   • CAnonymize the data before transfer so that GDPR no longer applies.
   • DImplement standard contractual clauses (SCCs) with the forensic lab to provide appropriate safeguards for the transfer.
   Reveal Solution Discussion Select an answer first