Collecting Evidence! Trivia Facts Quiz

10 Questions | Total Attempts: 53

Settings
Please wait...
Evidence Quizzes & Trivia

To test your understanding of the subject


Related Topics
Questions and Answers
  • 1. 
    What is the first step that the investigator needs to do when he/she enter the crime scene?
    • A. 

      Clone the hard drive

    • B. 

      Unplug/ remove all Ethernet cable and modem to eliminate remote access

    • C. 

      Identify evidence and potential containers of evidence

    • D. 

      Labeling the potential evidence

  • 2. 
    Which of the following is TRUE about describing the evidence:I- must describe by typeII-Note if the device is connected to other devicesIII- must describe by serial numberIV- Note whether the device is one or off
    • A. 

      I and III

    • B. 

      II and IV

    • C. 

      I, III and IV

    • D. 

      All above

  • 3. 
    Which of the following DOES NOT belong to Volatile Evidence?
    • A. 

      RAM

    • B. 

      USB Storage

    • C. 

      Network connection

    • D. 

      Open files

  • 4. 
    Dd.exe if= .................. of = .....................Fill in the blank with correct answer
    • A. 

      Input image, Destination image

    • B. 

      Destination image, input image

    • C. 

      Input image, input image

    • D. 

      Destination image, destination image

  • 5. 
    Arrange the following steps for cloning the hard drive?I- Protect the cloning process with write block II- Forensically clean the drive (wipe)III- Clone the drive using tool (hardware/software)
    • A. 

      III,II,I

    • B. 

      II, I, III

    • C. 

      I, II, III

    • D. 

      II,III,I

  • 6. 
    Rearrange the order of volatility for those evidence. (Up to less volatile)I- cacheII- memoryIII- archive mediaIV- HDDV- pagefiles
    • A. 

      I,II,III,IV, V

    • B. 

      I,III,II,IV,V

    • C. 

      I,II,V,IV,III

    • D. 

      I,II,IV,V,III

  • 7. 
    In order to protect the cell phone from network signals, we must place the phone in ............
  • 8. 
    If the phone is on, we need to switch it off before preserve it.
    • A. 

      True

    • B. 

      False

  • 9. 
    Which of the following are TRUTH about taking notes during collecting evidence?I- the notes should focus on what you do and observe at the sceneII- you can draw conclusions based on your observation on the noteIII- one of the method in taking the note is by chronological orderIV- writing the condition of the evidence on the notes
    • A. 

      I and III

    • B. 

      I,III and IV

    • C. 

      I,II, and III

    • D. 

      All above

  • 10. 
    Reasons for difficulty in identifying evidence at the crime scene?
    • A. 

      Small scale devices

    • B. 

      Non traditional storage media

    • C. 

      The data within the storage media are volatile

    • D. 

      Multiple possible crime scenes