Collecting Evidence! Trivia Facts Quiz
10 Questions
| Total Attempts: 53
Settings
To test your understanding of the subject
Questions and Answers
- 1.What is the first step that the investigator needs to do when he/she enter the crime scene?
- A.
Clone the hard drive
- B.
Unplug/ remove all Ethernet cable and modem to eliminate remote access
- C.
Identify evidence and potential containers of evidence
- D.
Labeling the potential evidence
- 2.Which of the following is TRUE about describing the evidence:I- must describe by typeII-Note if the device is connected to other devicesIII- must describe by serial numberIV- Note whether the device is one or off
- A.
I and III
- B.
II and IV
- C.
I, III and IV
- D.
All above
- 3.Which of the following DOES NOT belong to Volatile Evidence?
- A.
RAM
- B.
USB Storage
- C.
Network connection
- D.
Open files
- 4.Dd.exe if= .................. of = .....................Fill in the blank with correct answer
- A.
Input image, Destination image
- B.
Destination image, input image
- C.
Input image, input image
- D.
Destination image, destination image
- 5.Arrange the following steps for cloning the hard drive?I- Protect the cloning process with write block II- Forensically clean the drive (wipe)III- Clone the drive using tool (hardware/software)
- A.
III,II,I
- B.
II, I, III
- C.
I, II, III
- D.
II,III,I
- 6.Rearrange the order of volatility for those evidence. (Up to less volatile)I- cacheII- memoryIII- archive mediaIV- HDDV- pagefiles
- A.
I,II,III,IV, V
- B.
I,III,II,IV,V
- C.
I,II,V,IV,III
- D.
I,II,IV,V,III
- 7.In order to protect the cell phone from network signals, we must place the phone in ............
- 8.If the phone is on, we need to switch it off before preserve it.
- A.
True
- B.
False
- 9.Which of the following are TRUTH about taking notes during collecting evidence?I- the notes should focus on what you do and observe at the sceneII- you can draw conclusions based on your observation on the noteIII- one of the method in taking the note is by chronological orderIV- writing the condition of the evidence on the notes
- A.
I and III
- B.
I,III and IV
- C.
I,II, and III
- D.
All above
- 10.Reasons for difficulty in identifying evidence at the crime scene?
- A.
Small scale devices
- B.
Non traditional storage media
- C.
The data within the storage media are volatile
- D.
Multiple possible crime scenes
Back to top