Question 1

Which of the following is not a step in the process of digital forensic investigation?&#10;A) survey/identification&#10;B) report/presentation&#10;C) consumption/assessment&#10;D) examination/analysis

Accepted Answer

The correct steps in the process of digital forensic investigation are survey/identification, examination/analysis, report/presentation, and consumption/assessment. Therefore, option C is not a step in the process.

Question 2

What is the term used to describe the stage in the forensic process where data is retrieved and preserved?&#10;A) collection/acquisition&#10;B) report/presentation&#10;C) survey/identification&#10;D) examination/analysis

Accepted Answer

The term used to describe the stage in the forensic process where data is retrieved and preserved is "collection/acquisition." This is the first step in the process, where investigators gather all relevant information and data to be used in the examination and analysis stages.

Question 3

What term is used to describe the period of time when forensic procedures and computer crime legislation began to harmonize?&#10;A) structured phase&#10;B) Ad Hoc phase&#10;C) Golden Age&#10;D) none of the above

Accepted Answer

The structured phase is the period of time when forensic procedures and computer crime legislation began to harmonize.

Question 4

What is the term used to describe a data storage device that is portable and located outside of a computer that can be connected via USB or other means?&#10;A) internal hard drive&#10;B) external hard drive&#10;C) neither of these

Accepted Answer

An external hard drive is a portable data storage device that connects to a computer via USB or other means. An internal hard drive, on the other hand, is located within a computer and is not easily portable.

Question 5

A software program that is freely available, and can be modified, used, or shared with anyone is called:&#10;A) open source&#10;B) closed source&#10;C) proprietary&#10;D) none of the above

Accepted Answer

An open source software program is one that is freely available and can be modified, used, and shared with anyone. Examples of open source software include Firefox, Linux operating system, and LibreOffice. Closed source software, on the other hand, is proprietary software that is not freely available and can only be used under certain conditions set by the owner of the software. Proprietary software is owned by a company and cannot be freely modified or shared. Therefore, the best choice would be option A) open source.

Question 6

Which phrase is used to describe the period prior to the development of a formal structure, protocol, training, and tools for forensic analyses?&#10;A) structured phase&#10;B) Golden Age&#10;C) Ad Hoc phase&#10;D) none of the above

Accepted Answer

The ad hoc phase is used to describe the period prior to the development of a formal structure, protocol, training, and tools for forensic analyses. This phase is characterized by individualistic approaches to investigations with limited standardization and quality control measures.

Deck 9: Evolution of Digital Forensics