Which of following is not a rule of digital forensics? A. An examination should be performed on the original data B. A copy is made onto forensically sterile media. New media should always be used if available. C. The copy of the evidence must be an exact, bit-by-bit copy D. The examination must be conducted in such a way as to prevent any modification of the evidence.

Which of following is not a rule of digital forensics? A. An examination should be performed on the original data B. A copy is made onto forensically sterile media. New media should always be used if available. C. The copy of the evidence must be an exact, bit-by-bit copy D. The examination must be conducted in such a way as to prevent any modification of the evidence.
by

1 Answer

Answer :

A. An examination should be performed on the original data 
by

Related questions

Which of following is a not unethical norm for Digital Forensics Investigation? A. Uphold any relevant evidence. B. Declare any confidential matters or knowledge. C. Distort or falsify education, training, credentials. D. To respect the privacy of others.

Description : Which of following is a not unethical norm for Digital Forensics Investigation? A. Uphold any relevant evidence. B. Declare any confidential matters or knowledge. C. Distort or falsify education, training, credentials. D. To respect the privacy of others.

Last Answer : D. To respect the privacy of others. 

Digital Forensics entails _____. A. Accessing the system's directories viewing mode and navigating through the various systems files and folders B. Undeleting and recovering lost files C. Identifying and solving computer crimes D. The identification, preservation, recovery, restoration and presentation of digital evidence from systems and devices

Description : Digital Forensics entails _____. A. Accessing the system's directories viewing mode and navigating through the various systems files and folders B. Undeleting and recovering lost ... identification, preservation, recovery, restoration and presentation of digital evidence from systems and devices

Last Answer : D. The identification, preservation, recovery, restoration and presentation of digital evidence from systems and devices

Using what, data hiding in encrypted images be carried out in digital forensics? A. Acquisition. B. Steganography. C. Live analysis D. Hashing

Description : Using what, data hiding in encrypted images be carried out in digital forensics? A. Acquisition. B. Steganography. C. Live analysis D. Hashing

Last Answer : B. Steganography. 

Digital forensics is all of them except: A. Extraction of computer data. B. Preservation of computer data. C. Interpretation of computer data. D. Manipulation of computer data.

Description : Digital forensics is all of them except: A. Extraction of computer data. B. Preservation of computer data. C. Interpretation of computer data. D. Manipulation of computer data.

Last Answer : D. Manipulation of computer data. 

What is the most significant legal issue in computer forensics? A. Preserving Evidence B. Seizing Evidence C. Admissibility of Evidence D. Discovery of Evidence

Description : What is the most significant legal issue in computer forensics? A. Preserving Evidence B. Seizing Evidence C. Admissibility of Evidence D. Discovery of Evidence

Last Answer : C. Admissibility of Evidence 

Computer forensics do not involve_____activity. A. Preservation of computer data. B. Exraction of computer data. C. Manipulation of computer data. D. Interpretation of computer data.

Description : Computer forensics do not involve_____activity. A. Preservation of computer data. B. Exraction of computer data. C. Manipulation of computer data. D. Interpretation of computer data.

Last Answer : C. Manipulation of computer data. 

Which term refers for modifying a computer in a way which was not originally intended to view Information? A. Metadata B. Live analysis C. Hacking D. Bit Copy

Description : Which term refers for modifying a computer in a way which was not originally intended to view Information? A. Metadata B. Live analysis C. Hacking D. Bit Copy

Last Answer : C. Hacking 

The Father of Computer Forensics is a) Michasel Anderson b) J.Korn c) S.Ciardhuain d) G.Gunsh

Description : The Father of Computer Forensics is a) Michasel Anderson b) J.Korn c) S.Ciardhuain d) G.Gunsh

Last Answer : a) Michasel Anderson

The ability to recover and read deleted or damaged files from a criminal’s computer is an example of a law enforcement specialty called? A. Robotics B. Simulation C. Computer Forensics D. Animation

Description : The ability to recover and read deleted or damaged files from a criminal’s computer is an example of a law enforcement specialty called? A. Robotics B. Simulation C. Computer Forensics D. Animation

Last Answer : C. Computer Forensics 

When the field of PC forensics began? A.1960's B.1970's C.1980's D.1990's

Description : When the field of PC forensics began? A.1960's B.1970's C.1980's D.1990's

Last Answer : C.1980's 

There are three c's in computer forensics. Which is one of the three? A. Control B. Chance C. Chains D. Core

Description : There are three c's in computer forensics. Which is one of the three? A. Control B. Chance C. Chains D. Core

Last Answer : A. Control 

_______can makes or breaks investigation. A. Crime B. Security C: Digital Forensic D: Evidence

Description :  _______can makes or breaks investigation. A. Crime B. Security C: Digital Forensic D: Evidence

Last Answer : D: Evidence 

To collect and analyze the digital evidence that was obtained from the physical investigation phase, is the goal of which phase? A. Physical crime investigation B. Digital crime investigation. C. Review phase. D. Deployment phase.

Description : To collect and analyze the digital evidence that was obtained from the physical investigation phase, is the goal of which phase? A. Physical crime investigation B. Digital crime investigation. C. Review phase. D. Deployment phase.

Last Answer : B. Digital crime investigation. 

What is Digital Forensic? A. Process of using scientific knowledge in analysis and presentation of evidence in court B. The application of computer science and investigative procedures for a legal purpose involving the analysis of digital evidence after proper search authority, chain of custody, validation with mathematics, use of validated tools, repeatability, reporting, and possible expert presentation C. process where we develop and test hypotheses that answer questions about digital events D. Use of science or technology in the investigation and establishment of the facts or evidence in a court of law

Description : What is Digital Forensic? A. Process of using scientific knowledge in analysis and presentation of evidence in court B. The application of computer science and investigative procedures for a legal ... technology in the investigation and establishment of the facts or evidence in a court of law

Last Answer : B. The application of computer science and investigative procedures for a legal purpose involving the analysis of digital evidence after proper search authority, chain of custody, validation with mathematics, use of validated tools, repeatability, reporting, and possible expert presentation

In the past, the method for expressing an opinion has been to frame a ____ question based on available factual evidence. A. Hypothetical B. Nested C. Challenging D. Contradictory

Description : In the past, the method for expressing an opinion has been to frame a ____ question based on available factual evidence. A. Hypothetical B. Nested C. Challenging D. Contradictory

Last Answer : A. Hypothetical  

What is called as the process of creation a duplicate of digital media for purpose of examining it? A. Acquisition. B. Steganography. C. Live analysis D. Hashing.

Description : What is called as the process of creation a duplicate of digital media for purpose of examining it? A. Acquisition. B. Steganography. C. Live analysis D. Hashing. 

Last Answer : A. Acquisition. 

Which of the following is FALSE? A. The digital forensic investigator must maintain absolute objectivity B. It is the investigator’s job to determine someone’s guilt or innocence. C. It is the investigator’s responsibility to accurately report the relevant facts of a case. D. The investigator must maintain strict confidentiality, discussing the results of an investigation on only a “need to know”

Description : Which of the following is FALSE? A. The digital forensic investigator must maintain absolute objectivity B. It is the investigator's job to determine someone's guilt or innocence. C. It is ... must maintain strict confidentiality, discussing the results of an investigation on only a need to know

Last Answer : B. It is the investigator’s job to determine someone’s guilt or innocence. 

___________is well established science where various contribution have been made A. Forensic B. Crime C. Cyber Crime D. Evidence

Description :  ___________is well established science where various contribution have been made A. Forensic B. Crime C. Cyber Crime D. Evidence

Last Answer : A. Forensic 

IDIP stands for A. Integrated Digital Investigation Process. B. Integrated Data Investigator Process. C. Integrated Digital Investigator Process. D. Independent Digital Investigator Process.

Description : IDIP stands for A. Integrated Digital Investigation Process. B. Integrated Data Investigator Process. C. Integrated Digital Investigator Process. D. Independent Digital Investigator Process.

Last Answer : A. Integrated Digital Investigation Process. 

International Organization on Compter Evidence was formed in a) 1980 b) 1995 c) 1997 d) 1998

Description : International Organization on Compter Evidence was formed in a) 1980 b) 1995 c) 1997 d) 1998

Last Answer : b) 1995

Which of following is not general ethical norm for Investigator? A. To contribute to society and human being. B. Uphold any relevant Evidence. C. To be honest and trustworthy. D. To honor confidentially.

Description : Which of following is not general ethical norm for Investigator? A. To contribute to society and human being. B. Uphold any relevant Evidence. C. To be honest and trustworthy. D. To honor confidentially.

Last Answer : B. Uphold any relevant Evidence. 

Which of following are Unethical norms for Investigator? A. Uphold any relevant evidence. B. Declare any confidential matters or knowledge. C. Distort or falsify education, training, credentials. D. All of above E. None of above

Description : Which of following are Unethical norms for Investigator? A. Uphold any relevant evidence. B. Declare any confidential matters or knowledge. C. Distort or falsify education, training, credentials. D. All of above E. None of above

Last Answer : D. All of above 

Which of the following is not a property of computer evidence? A. Authentic and Accurate. B. Complete and Convincing. C. Duplicated and Preserved. D. Conform and Human Readable.

Description : Which of the following is not a property of computer evidence? A. Authentic and Accurate. B. Complete and Convincing. C. Duplicated and Preserved. D. Conform and Human Readable.

Last Answer : D. Conform and Human Readable. 

Abstract Digital Forensic model in a) 2000 b) 2001 c) 2002 d) 2003

Description : Abstract Digital Forensic model in a) 2000 b) 2001 c) 2002 d) 2003

Last Answer : c) 2002

Who proposed Abstract Digital Forensic Model a) G.Gunsh b) S.Ciardhuain c) Kohn , Eloff d) G.Palmar

Description : Who proposed Abstract Digital Forensic Model a) G.Gunsh b) S.Ciardhuain c) Kohn , Eloff d) G.Palmar

Last Answer : a) G.Gunsh

Does database forensic include in Digital Forensic application a) True b) False

Description : Does database forensic include in Digital Forensic application a) True b) False

Last Answer : a) True

IDIP stands for a) Integrated Digital Investigation Process b) Integrrated Digital Investigator Process c) Integrated Digital Investigator Process d) Independent Digital Investigator Process

Description : IDIP stands for a) Integrated Digital Investigation Process b) Integrrated Digital Investigator Process c) Integrated Digital Investigator Process d) Independent Digital Investigator Process

Last Answer : a) Integrated Digital Investigation Process

What are the important parts of the mobile device which used in Digital forensic? A. SIM B. RAM C. ROM. D.EMMC chip

Description :  What are the important parts of the mobile device which used in Digital forensic? A. SIM B. RAM C. ROM. D.EMMC chip

Last Answer : D.EMMC chip 

Which model of Investigation proposed by Carrier and Safford? A. Extended Model of Cybercrime Investigation (EMCI) B. Integrated Digital Investigation Process(IDIP) C. Road Map for Digital Forensic Research (RMDFR) D. Abstract Digital Forensic Model (ADFM)

Description : Which model of Investigation proposed by Carrier and Safford? A. Extended Model of Cybercrime Investigation (EMCI) B. Integrated Digital Investigation Process(IDIP) C. Road Map for Digital Forensic Research (RMDFR) D. Abstract Digital Forensic Model (ADFM)

Last Answer : B. Integrated Digital Investigation Process(IDIP) 

Who proposed End to End Digital Investigation Process (EEDIP)? A. G. Palmar B. Stephenson C. Michael Anderson D. S.Ciardhuain

Description : Who proposed End to End Digital Investigation Process (EEDIP)? A. G. Palmar B. Stephenson C. Michael Anderson D. S.Ciardhuain

Last Answer : B. Stephenson 

Which phase entails a review of the whole investigation and identifies area of improvement? A. Physical crime investigation B. Digital crime investigation. C. Review phase. D. Deployment phase

Description : Which phase entails a review of the whole investigation and identifies area of improvement? A. Physical crime investigation B. Digital crime investigation. C. Review phase. D. Deployment phase

Last Answer : C. Review phase. 

To provide mechanism to an incident to be detected and confirmed is purpose of which phase? A. Physical crime investigation B. Digital crime investigation. C. Review phase. D. Deployment phase.

Description : To provide mechanism to an incident to be detected and confirmed is purpose of which phase? A. Physical crime investigation B. Digital crime investigation. C. Review phase. D. Deployment phase.

Last Answer : D. Deployment phase. 

_______phase includes putting the pieces of a digital puzzle together and developing investigative hypotheses A. Preservation phase B. Survey phase C. Documentation phase D. Reconstruction phase E. Presentation phase

Description : _______phase includes putting the pieces of a digital puzzle together and developing investigative hypotheses A. Preservation phase B. Survey phase C. Documentation phase D. Reconstruction phase E. Presentation phase 

Last Answer : D. Reconstruction phase 

Who proposed Road Map for Digital Forensic Research (RMDFR) A. G.Gunsh. B. S.Ciardhuain C. J.Korn. D. G.Palmar

Description : Who proposed Road Map for Digital Forensic Research (RMDFR) A. G.Gunsh. B. S.Ciardhuain C. J.Korn. D. G.Palmar 

Last Answer : D. G.Palmar 

What is first step to Handle Retrieving Data from an Encrypted Hard Drive? A. Formatting disk B. Storing data C. Finding configuration files. D. Deleting files.

Description : What is first step to Handle Retrieving Data from an Encrypted Hard Drive? A. Formatting disk B. Storing data C. Finding configuration files. D. Deleting files.

Last Answer : C. Finding configuration files. 

_______searches through raw data on a hard drive without using a file system. A. Data mining B. Data carving C. Meta data D. Data Spoofing.

Description : _______searches through raw data on a hard drive without using a file system. A. Data mining B. Data carving C. Meta data D. Data Spoofing.

Last Answer : B. Data carving 

_________is the process of recording as much data as possible to create reports and analysis

Description : _________is the process of recording as much data as possible to create reports and analysis 

Last Answer : A. Data mining 

Which of this is not a computer crime? A. e-mail harassment B. Falsification of data. C. Sabotage. D. Identification of data

Description : Which of this is not a computer crime? A. e-mail harassment B. Falsification of data. C. Sabotage. D. Identification of data

Last Answer : D. Identification of data 

In _______phase investigator transfers the relevant data from a venue out of physical or administrative control of the investigator to a controlled location F. Preservation phase G. Survey phase H. Documentation phase I. Reconstruction phase J. Presentation phase

Description : In _______phase investigator transfers the relevant data from a venue out of physical or administrative control of the investigator to a controlled location F. Preservation phase G. Survey phase H. Documentation phase I. Reconstruction phase J. Presentation phase

Last Answer : G. Survey phase 

In _______phase investigator transfers the relevant data from a venue out of physical or administrative control of the investigator to a controlled location A. Preservation phase B. Survey phase C. Documentation phase D. Reconstruction phase E. Presentation phase

Description : In _______phase investigator transfers the relevant data from a venue out of physical or administrative control of the investigator to a controlled location A. Preservation phase B. Survey phase C. Documentation phase D. Reconstruction phase E. Presentation phase

Last Answer : B. Survey phase 

Operational audits generally have been conducted by internal and COA auditors, but may be performed by certified public accountants. A primary purpose of an operational audit is to provide: a. A measure of management performance in meeting organizational goalsb. The results of internal examinations of financial and accounting matters to a company's top-level management. c. Aid to the independent-auditor, who is conducting the examination of the financial statements. d. A means of assurance that internal accounting controls are functioning as planned.

Description : Operational audits generally have been conducted by internal and COA auditors, but may be performed by certified public accountants. A primary purpose of an operational audit is to provide: ... statements. d. A means of assurance that internal accounting controls are functioning as planned

Last Answer : A measure of management performance in meeting organizational goals

The Philippine Standards on Auditing issued by AASC a. Need to be applied on all audit related. b. Require that in no circumstances would an auditor may judge it necessary to depart from a PSA, even though such a departure may result to more effective achievement of the objective of an audit. c. Apply to independent examination of financial statements of any entity when such an examination is conducted for the purpose of expressing an opinion. d. Must not apply to other related activities of auditors

Description : The Philippine Standards on Auditing issued by AASC a. Need to be applied on all audit related. b. Require that in no circumstances would an auditor may judge it necessary to depart from a PSA, ... for the purpose of expressing an opinion. d. Must not apply to other related activities of auditors

Last Answer : Apply to independent examination of financial statements of any entity when such an examination is conducted for the purpose of expressing an opinion.

The Philippine Standards on Auditing issued by AASC: a. Apply to independent examination of financial statements of any entity when such an examination is conducted for the purpose of expressing an opinion. b. Need to be applied on all audit related. c. Must not apply to other related activities of auditors. d. Require that in no circumstances would an auditor may judge it necessary to depart from a PSA, even though such a departure may result to more effective achievement of the objective of an audit

Description : The Philippine Standards on Auditing issued by AASC: a. Apply to independent examination of financial statements of any entity when such an examination is conducted for the purpose of expressing an ... though such a departure may result to more effective achievement of the objective of an audit

Last Answer : Apply to independent examination of financial statements of any entity when such an examination is conducted for the purpose of expressing an opinion

All of forensic examination should be perform on a original digital evidence (a) True (b) False

Description : All of forensic examination should be perform on a original digital evidence (a) True (b) False

Last Answer : (a) True

Best Evidence Rule states that… a. It states that multiple copies of electronic files may be a part of the “original” or equivalent to the “original.” b. It states that copy of evidence may be considered as original evidence. c. It states that the multiple copies of evidence may be part of the “original” or equivalent to the “original.” d. It states that multiple copies of electronic files may be a part of the “original” or same as “original.”

Description : Best Evidence Rule states that a. It states that multiple copies of electronic files may be a part of the original or equivalent to the original. b. It states that copy of evidence may be ... that multiple copies of electronic files may be a part of the original or same as original.

Last Answer : It states that multiple copies of electronic files may be a part of the “original” or equivalent to the “original.”

Investigator should satisfy the following point a) Contribute to the society and human being b) Avoid harm to others c) Honest and trustworthy d) All of the above

Description : Investigator should satisfy the following point a) Contribute to the society and human being b) Avoid harm to others c) Honest and trustworthy d) All of the above

Last Answer : d) All of the above

Who proposed Extended Model of Cybercrime Investigation a) G.Gunsh b) S.Ciardhuain c) J.Korn d) G.Palmar

Description : Who proposed Extended Model of Cybercrime Investigation a) G.Gunsh b) S.Ciardhuain c) J.Korn d) G.Palmar

Last Answer : d) G.Palmar

Who proposed Road map model a) G.Gunsh b) S.Ciardhuain c) J.Korn d) G.Palmar

Description : Who proposed Road map model a) G.Gunsh b) S.Ciardhuain c) J.Korn d) G.Palmar

Last Answer : d) G.Palmar

Which file is used to store the user entered password? A. .exe B. .txt C. .iso D. .sam

Description : Which file is used to store the user entered password? A. .exe B. .txt C. .iso D. .sam

Last Answer : D. .sam 

Which of following are general Ethical norms for Investigator? A. To contribute to society and human being. B. To avoid harm to others. C. To be honest and trustworthy. D. All of above E. None of above

Description : Which of following are general Ethical norms for Investigator? A. To contribute to society and human being. B. To avoid harm to others. C. To be honest and trustworthy. D. All of above E. None of above

Last Answer : D. All of above