1. Computer Forensics in Today’s World 1) Which of the following is true regarding computer forensics? i. Computer forensics deals with the process of
... [Show More] finding evidence related to a digital crime to find the culprits and initiate legal action against them. 2) Which of the following is not an objective of computer forensics? i. Document vulnerabilities allowing further loss of intellectual property, finances, and reputation during an attack. 3) Forensic readiness refers to _____________. i. An organization’s ability to make optimal use of digital evidence in a limited time period and with minimal investigation costs 4) What is not an impact of cybercrime? i. Huge financial gain 6) Which of the following is true of cybercrimes? i. Investigators, with a warrant, have the authority to forcibly seize the computing devices. 7) Which of the following is true of civil crimes? i. The initial reporting of the evidence is generally informal 8) Which of the following is a user-created source of potential evidence? i. Address book 9) Which of the following is a computer-created source of potential evidence? i. Swap file 10) Which of the following is not where potential evidence may be located? i. Processor 11) Under which of the following conditions will duplicate evidence not suffice? i. When original evidence is in possession of the originator. 12) Which of the following Federal Rules of Evidence contains Rulings on Evidence? i. Rule 103 13) Which of the following Federal Rules of Evidence ensures that the truth may be ascertained and proceedings justly determined? i. Rule 102 14) Which of the following Federal Rules of Evidence governs proceedings in the courts of the United States? i. Rule 101 15) Which of the following Federal Rules of Evidence states that the court shall restrict the evidence to its proper scope and instruct the jury accordingly? i. Rule 105 16) Which of the following answers refers to a set of methodological procedures and techniques to identify, gather, preserve, extract, interpret, document, and present evidence from computing equipment in such a manner that the discovered evidence is acceptable during a legal and/or administrative proceeding in a court of law? i. Computer Forensics 16) Minimizing the tangible and intangible losses to the organization or an individual is considered an essential computer forensics use. i. True 17) Cybercrimes can be classified into the following two types of attacks, based on the line of attack. i. Internal and external [Show Less]