**** Kindly read well and choose the answers accordingly ****

QUESTION 1

Policies (of policies and procedures) are:

1. Statements from an organization addressing a specific issue.
2. Ignored by most employees.
3. Not generally contained in the Employee Handbook.
4. The same as procedures.
5. Seldom ensure employee dignity and respectful treatment.

QUESTION 2

Investigators will:

1. Take charge of the scene and direct all activity.
2. Take direction from the first responder.
3. Take their time responding to the scene.
4. Discard evidence seized by anyone but themselves.
5. Ignore the first responder and start over.

QUESTION 3

Crime scene technicians are (choose all that apply):

1. Always experts in crime scene photography.
2. Considered the most glamorous positions in criminal investigations.
3. Highly trained in the collection of evidence.
4. Only sworn members of law enforcement agencies.
5. Possibly unsworn positions in a law enforcement agency.

QUESTION 4

A hacker is:

1. Always apolitical.
2. Always unknown to the victim.
3. A malicious user who gains access to an information system belonging to someone else.
4. Always someone with bad intent.
5. Always under twenty-one years old by definition.

QUESTION 5

Sworn law enforcement officers:

1. Generally take an oath to uphold the law, have the power of arrest, but do not carry a firearm.
2. Generally don't take an oath to uphold the law, have no power of arrest, and do not carry a firearm.
3. Generally don't take an oath to uphold the law, have no power of arrest, but do carry a firearm.
4. Generally take an oath to uphold the law, have the power of arrest, and carry a firearm.
5. Generally take an oath to uphold the law, have no power of arrest, and do not carry a firearm.

QUESTION 6

Data may be exfiltrated by (choose all that apply):

1. Cloud accounts.
2. Remote access.
3. Peer-to-peer sharing sites.
4. Printed documents.
5. USB devices.

QUESTION 7

To be an effective digital investigator, one must (choose all that apply):

1. Be terrified of testifying.
2. Understand how data is saved.
3. Understand how data is created.
4. Be able to forensically preserve data.
5. Understand how data is shared.

QUESTION 8

'Bagged and tagged' refers to:

1. The celebration of the crime scene team after a success.
2. Catching a speeder on the highway.
3. The duties of a crime scene technician.
4. Evidence seized and placed in the appropriate container.
5. A suspect caught red-handed at the scene.

QUESTION 9

Digital forensics is (choose all that apply):

1. About finding the digital artefact to the exclusion of all else.
2. A division of forensics involving the recovery and analysis of data recovered from digital devices.
3. The formal examination and analysis of digital evidence.
4. Formerly, a synonym of computer forensics.
5. Involved with all devices that store analog data, excluding those with analog and digital data.

QUESTION 10

Stalking is:

1. Usually about victimizing men.
2. Not a result of online anonymity.
3. A low-impact crime.
4. Easy to prove with digital evidence.
5. Considered a crime.

QUESTION 11

Yellow crime scene tape is:

1. Used to eliminate the need to monitor the scene.
2. Used to keep criminals on the scene.
3. Not used in real life, unlike in TV crime shows.
4. A recognizeable barrier.
5. A worthless thin piece of plastic.

QUESTION 12

The hardest part of the field may be:

1. Speaking in front of a large group while answering tough questions.
2. Remembering your password.
3. Staying alert.
4. Having work/life balance.
5. Missing lunch.

QUESTION 13

The person in charge of the crime scene should:

1. Watch a lot of CSI: Miami reruns.
2. Improvise on procedures around evidence corruption.
3. Have knowledge of the fragility of digital evidence.
4. Be vigilant against reporters.
5. Know everything about digital evidence.

QUESTION 14

A digital forensic investigator should:

1. Treat every empoloyee misconduct investigation as if it may go to court.
2. Ignore statutory requirements and take direction from the employer.
3. Treat the most egregious policy violations as if they may go to court.
4. Always make the decision about whether to notify law enforcement in an employee misconduct investigation.
5. Override the organization's legal counsel as he or she sees fit.

QUESTION 15

The way to get better in the digital forensics field is to (choose all that apply):

1. Take training.
2. Avoid going to industry seminars.
3. Fail miserably in court.
4. Practice by conducting real and mock examinations.
5. Reach out to your peers for advice.