1. The process of a computer forensics investigation includes each of the following components except:
a. Gathering preliminary information
b. Analyzing digital data
c. Collecting and storing digital data
d. Staking out suspects using electronic devices

2. In a computer forensics context, _____ means interpreting recovered data and compiling it in a logical and useful format:
a. Compilation
b. Analysis
c. Scrubbing
d. Collating

3. The most time consuming task of a computer forensics investigation is the actual application of analytical tools and methods.
a. True
b. False

4. The final stage of a forensic accounting engagement is the communication of results and opinions in a report.
a. True
b. False

5. Rule 26 of the Federal Rules of Civil Procedure identifies specific components that an expert report must contain.
a. True
b. False

6. An expert’s draft reports are discoverable.
a. True
b. False

7. Each of the following is discoverable except:
a. Communications regarding the expert’s compensation
b. Notes related to conversations with the engaging attorney
c. Communications regarding the assumptions to be relied on by the expert in forming his or her opinions
d. Communications regarding the facts and data to be relied on by the expert in forming his or her opinions

8. Reports prepared in the course of litigation must follow strict guidelines set forth by the AICPA.
a. True
b. False

9. It is better to render an oral report to eliminate all possibility that the report will be misunderstood.
a. True
b. False

10. Each of the following is a type of report a forensic ­accountant might issue except:
a. Certified report
b. Calculation report
c. Detailed report
d. Summary report

11. Regardless of the form of a report, the report must be stated in a legally sufficient manner and must be based on reliable facts, data, and methodology.
a. True
b. False