1. At the time of evidence transfer, both sender and receiver need to provide the information about date and time of transfer in what record?

A. Evidence record

B. Evidence preserving record

C. Chain of custody record

D. Evidence bag

2. Which of the following actions by a forensic investigator would be violate their code of ethics?

A. Refusing evidence that would hurt their case.

B. Following well known standard processes for collecting evidence.

C. When testifying to a court, giving apartial explanations to shed a positive light ontheir case.

D. Taking on a project or case that is beyond their technical knowledge or abilities.

3. What is the Best Evidence Ruleas it relates to digital evidence in court cases?

A. You can always use copies of digital evidence as long as you can show it is an accurate copy.

B. You can generally use copies of digital evidence except for a couple of situations related to financial transactions with banks.

C. You should always use the original evidence, but there are a couple of situations where copies are allowed such as if the original evidence was destroyed by fire.

D. You can never you use copies of evidence.

3. Does the difference between civil and criminal case impact forensic investigators?

A. No, because they are acquiring data in the same way no matter the topic of the investigation.

B. No, because the difference is only related to the punishment defendants would receive and not related to evidence.

C. Yes,because civil lawsuits generally do not allow digital forensic evidence.

D. Yes, because there are differences in the ability to acquire access with search warrants in criminal cases.

4. Whichof the following is a common challenge from cybercrimes that forensic investigators face?

A. Victims are very aware of the laws that protect them.

B. The permanence of evidence related to cybercrimes

C. Cybercrimes being committed from different countries

D. Very large amount of data that is related to a simple cybercrime