Please answer all questions for Thumbs Up

1. Assume that a network forensic investigator collects TCP/IP packet headers transmitted from outside the organization's network to into the organization's network from non-employees. Explain the reasons why a search warrant may or may not be required?

2. Assume that a network forensic investigator collects TCP/IP packet bodies transmitted from outside the organization's network to into the organization's network from non-employees. Explain the reasons why a search warrant may or may not be required?

3. The reliability of TCP/IP packet header forensic data may be questioned because of spoofing attacks that may falsify the MAC or IP address. What other computer or network forensic data may be used to authenticate a MAC or IP address?

4. Explain the concept of Admissibility of Evidence

5.

TCP/IP is called the Internet Protocol Suite because it represents a collection of network protocols that is used to transmit data across the Internet between one application and another application, e.g., your Internet Browser communicating with a web server. Complete the following table is a reasonable amount of detail.

TCP/IP Layers	Detailed List of Functions	List of Relevant Protocols Summer 2018	Relationship to OSI Model Layer
Application Layer	Provides an Interface between Applications and network communication, e.g., TCP/IP	HTTP, SMTP, more
Transportation Layer
Network Layer
Interlink (or Link) Layer