vitorylearner.com sitemap

When an investigator contacts by telephone the domain administrator or controller listed by a Who is lookup to request all e-mails sent and received for a user account be preserved, what U.S.C. statute authorizes this phone call and obligates the ISP

In a computer forensics investigation, what describes the route that evidence takes from the time you find it until the case is closed or goes to court?: rules of evidence, law of probability, chain of custody, policy of separation

Before you are called to testify as an expert, what must an attorney do first?: engage in damage control, prove that the tools you used to conduct your examination are perfect, read your curriculum vitae to the jury, qualify you as an expert witness

Jonathan is an investigator, but he is not the first one on the scene. He wants to show the path of evidence collected from the scene to the forensic lab. What should he use?: criminal report, exhibit numbering, Daubert standard report, chain of cu

Which of the following is true regarding digital evidence?: the investigator does not need a search warrant if they deem the investigation necessary, investigators should not worry about the integrity of evidence, a duplicate copy should be made for

Which ISO standard enables laboratories to demonstrate that they comply with quality assurance and provide valid results?: ISO/IEC 17025, ISO/IEC 18025, ISO/IEC 16025, ISO/IEC 19025

"In exceptional circumstances, where a person finds it necessary to access original data held on a computer or on storage media, that person must be competent to do so and be able to explain his/her actions and the impact of those actions on the

Steve thought it would be funny to make some changes on Tom‘s computer at their office. Steve went into the Microsoft Windows registry and changed the keyboard mapping configuration on Tom‘s computer. Now Tom is unable to log into his com

Which standard is used during a judicial trial to assess whether an expert witness‘s scientific testimony is based on scientifically valid reasoning that can adequately be applied (admissible) to the facts under consideration?: Joiner Standard,

You are asked to build a forensic lab and your manager has specifically informed you to use copper for lining the walls, ceilings, and floor. What is the main purpose of lining the walls, ceilings, and floor with copper?: To control the room temperat

Fred, a cybercrime investigator for the FBI, finished storing a solid-state drive in a static resistant bag and filled out the chain of custody form. Two days later, John grabbed the solid-state drive and created a clone of it (with write blockers en

Madison is on trial for allegedly breaking into her university‘s internal network. The police raided her dorm room and seized all of her computer equipment. Madison‘s lawyer is trying to convince the judge that the seizure was unfounded a

Identify the term that refers to individuals who, by virtue of their knowledge and expertise, express an independent opinion on a matter related to a case based on the information that is provided: Defense witness, Forensic examiner, Evidence examine

This is a statement, other than one made by the declarant while testifying at the trial or hearing, offered in evidence to prove the truth of the matter asserted. Which among the following is suitable for the above statement?: Hearsay rule, Testimony

Debbie has obtained a warrant to search a known pedophile‘s house. Debbie went to the house and executed the search warrant to seize digital devices that have been recorded as being used or downloading illicit images. She seized all digital de

Jacob, a cybercrime investigator, joined a forensics team to participate in a criminal case involving digital evidence. After the investigator collected all the evidence and presents it to the court, the judge dropped the case and the defense attorne

Adam is thinking of establishing a hospital in the US and approaches John, a software developer to build a site and host it for him on one of the servers, which would be used to store patient health records. He has learned from his legal advisors tha

Why would a company issue a dongle with the software they sell?: To provide source code protection, To provide wireless functionality with the software, To provide copyright protection, To ensure that keyloggers cannot be used

“In order to ensure that the digital evidence is collected, preserved, examined, or transferred in a manner safeguarding the accuracy and reliability of the evidence, law enforcement, and forensics organizations must establish and maintain an effec

Jacob is a computer forensics investigator with over 10 years of experience in investigations and has written over 50 articles on computer forensics. He has been called upon as a qualified witness to testify the accuracy and integrity of the technica

A law enforcement officer may only search for and seize criminal evidence with _______________________, which are facts or circumstances that would lead a reasonable person to believe a crime has been committed or is about to be committed, evidence o

Depending upon the jurisdictional areas, different laws apply to different incidents. Which of the following law is related to fraud and related activity in connection with computers?: 18 USC §1029, 18 USC §1030, 18 USC §1361, 18 USC §1371

Which among the following acts has been passed by the U.S. Congress to protect investors from the possibility of fraudulent accounting activities by corporations?: Health Insurance Probability and Accountability act of 1996, Gramm-Leach-Bliley act, F

Tony, an email marketing professional, is accused of enticing people to reveal their personal information such as banking credentials, credit card details, bank balance, etc., via phishing emails. What type of investigation will apply to Tony‘s

To which phase of the computer forensics investigation process does “planning and budgeting of a forensics lab” belong?: Pre-investigation phase, Reporting phase, Post-investigation phase, Investigation phase

What is considered a grant of a property right given to an individual who discovers or invents a new machine, process, useful composition of matter or manufacture?: Copyright, Design patent, Trademark, Utility patent

Jim’s company regularly performs backups of their critical servers. But the company can’t afford to send backup tapes to an off-site vendor for long term storage and archiving. Instead Jim’s company keeps the backup tapes in a safe in the offic

This law sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have you stop emailing them, and spells out tough penalties for violations.: Telemarketing act, European Anti-Spam act, The

Rule 1002 of Federal Rules of Evidence (US) talks about ______: Admissibility of other evidence of contents, Admissibility of duplicates, Admissibility of original, Requirement of original

"No action taken by law enforcement agencies or their agents should change data held on a computer or storage media which may subsequently be relied upon in court" - this principle is advocated by which of the following?: Locard’s exchang

Which Federal Rule of Evidence speaks about the Hearsay exception where the availability of the declarant is immaterial and certain characteristics of the declarant such as present sense impression, excited utterance, and recorded recollection are al

What does Locard‘s Exchange Principle state?: Any information of probative value that is either stored or transmitted in a digital form, Digital evidence must have some characteristics to be disclosed in the court of law, Anyone or anything, en

SO/IEC 17025 is an accreditation for which of the following: Forensics lab licensing, Encryption, Chain of custody, Encryption

Which "Standards and Criteria" under SWGDE states that "the agency must use hardware and software that are appropriate and effective for the seizure or examination procedure"?: Standards and Criteria 1.6 Standards, Standards and C

Which forensic investigation methodology believes that criminals commit crimes solely to benefit their criminal enterprises?: Scientific Working Group on Digital Evidence, Daubert Standard, Enterprise Theory of Investigation, Fyre Standard

Which among the following U.S. laws requires financial institutions companies that offer consumers financial products or services such as loans, financial or investment advice, or insurance to protect their customers information against security thre

Which of the following examinations refers to the process of providing the opposing side in a trial the opportunity to question a witness?: Witness Examination, Indirect Examination, Cross Examination, Direct Examination

Which US law does the interstate or international transportation and receiving of child pornography fall under?: 18 U.S.C. 146A, 18 U.S.C. 466A, 18 U.S.C. 2252, 18 U.S.C. 252

Which Federal rule of evidence states that a duplicate is admissible to the same extent as an original unless (1) a genuine question is raised as to the authenticity of the original or (2) in the circumstances it would be unfair to admit the duplicat

Which federal computer crime law specifically refers to fraud and related activity in connection with access devices like routers?: 18 U.S.C. 1029, 18 U.S.C. 1362, 18 U.S.2511, 18 U.S.C. 2703

Which among the following search warrants allows the first responder to search and seize the victim‘s computer components such as hardware, software, storage devices, and documentation?: John Doe Search Warrant, Citizen Informant Search Warrant

Which of the following is a federal law enacted in the US to control the ways that financial institutions deal with the private information of individuals?: SOX, GLBA, HIPAA 1996, PCI DSS

Who established “methodology for testing computer forensic software tools by the development of general tool specifications, test procedures, test criteria, test sets, and test hardware.”: NCIS, NIST, EC-Council, SWGDE

Which among the following is an act passed by the U.S. Congress in 2002 to protect investors from the possibility of fraudulent accounting activities by corporations?: GLBA, SOX, FISMA, HIPAA

Which of the following laws/rules of the USA deal with fraud and related activity in connection with computers?: 18 USC §1029, Rule 1003, 18 USC §1030, Rule 1002

You have used a newly released forensic investigation tool, which doesn‘t meet the Daubert Test, during a case. The case has ended-up in court. What argument could the defense make to weaken your case?: The tool hasn‘t been tested by the

When obtaining a warrant, it is important to:: particularly describe the place to be searched and particularly describe the items to be seized, generally describe the place to be searched and particularly describe the items to be seized, generally de

Which of the following standard represents a legal precedent set in 1993 by the Supreme Court of the United States regarding the admissibility of expert witnesses‘ testimony during federal legal proceedings?: SWGDE & SWGIT, IOCE, Frye, Daubert

Which of the following reports are delivered under oath to a board of directors/managers/panel of the jury?: Verbal Formal Report, Written Formal Report, Verbal Informal Report, Written Informal Report

Which of the following examinations refers to the process of the witness being questioned by the attorney who called the latter to the stand?: Witness Examination, Indirect Examination, Direct Examination, Cross Examination

A section of your forensics lab houses several electrical and electronic equipment. Which type of fire extinguisher you must install in this area to contain any fire incident?: Class B, Class D, Class C, Class A

The objective of this act was to protect consumers‘ personal financial information held by financial institutions and their service providers.?: Gramm-Leach-Bliley Act, Sarbanes-Oxley 2002, California SB 1386, HIPAA

Identify the NIST Publication that provides the required guidelines to help organizations to sanitize data to preserve the confidentiality of the information?: NIST SP 800-88, NIST SP 800-89, NIST SP 800-90, NIST SP 800-87

Gary, a computer technician, is facing allegations of abusing children online by befriending them and sending them illicit adult images from his office computer. What type of investigation does this case require?: Administrative Investigation, Crimin

Law enforcement officers are conducting a legal search for which a valid warrant was obtained. While conducting the search, officers observe an item of evidence for an unrelated crime that was not included in the warrant. The item was clearly visible

What does the Rule 101 of Federal Rules of Evidence states?: Purpose of the Rules, Limited Admissibility of the Evidence, Rulings on Evidence, Scope of the Rules, where they can be applied

Two organizations, A and B, operating in the field of telecommunications, came into an agreement that they will not enter other‘s territory. But, a few years after the agreement, organization B began to offer services into the A‘s territo

What must an attorney do first before you are called to testify as an expert?: Prove that the tools you used to conduct your examination are perfect, Engage in damage control, Read your curriculum vitae to the jury, Qualify you as an expert witness

Which of these documents will help an investigator to determine the details of personnel responsible for evidence handling?: Search Warrant, Chain of Custody, Consent Search Form, Case Assessment Form

You are called by an author who is writing a book and he wants to know how long the copyright for his book will last after hehas the book published?: 70 years, The life of the author, The life of the author plus 70 years, Copyrights last forever

In General, __________________ Involves the investigation of data that can be retrieved from the hard disk or other disks of a computer by applying scientific methods to retrieve the data.: Network Forensics, Data Recovery, Disaster Recovery, Compute

Which of the following is NOT a physical evidence?: Removable media, Publications, Cables, Image file on a hard disk

______allows a forensic investigator to identify the missing links during investigation.: Evidence preservation, Chain of custody, Evidence reconstruction, Exhibit numbering

A state department site was recently attacked and all the servers had their disks erased. The incident response team sealed the area and commenced investigation. During evidence collection they came across a zip disks that did not have the standard l

Which forensic investigating concept trails the whole incident from how the attack began to how the victim was affected?: Point-to-point, End-to-end, Thorough, Complete event analysis

Paul‘s company is in the process of undergoing a complete security audit including logical and physical security testing. After all logical tests were performed; it is now time for the physical round to begin. None of the employees are made awa

An expert witness is a ____________ who is normally appointed by a party to assist the formulation and preparation of a party‘s claim or defense?: Expert law graduate appointed by attorney, Subject matter specialist, Expert in criminal investig

Which among the following search warrants allows the first responder to get the victim‘s computer information such as service records, billing records, and subscriber information from the service provider?: Electronic Storage Device Search Warr

During the trial, an investigator observes that one of the principal witnesses is severely ill and cannot be present for the hearing. He decides to record the evidence and present it to the court. Under which rule should he present such evidence?: Li

Which U.S. law sets the rules for sending emails for commercial purposes, establishes the minimum requirements for commercial messaging, gives the recipients of emails the right to ask the senders to stop emailing them, and spells out the penalties i

Which legal document allows law enforcement to search an office, place of business, or other locale for evidence relating to an alleged crime?: bench warrant, wire tap, subpoena, search warrant

Which rule requires an original recording to be provided to prove the content of a recording?: 1004, 1005, 1002, 1003

Which U.S. Federal law requires financial institutions that offer consumers financial products or services to protect their customers‘ private information?: Gramm-Leach-Bliley Act (GLBA), Payment Card Industry Data Security Standard (PCI DSS),

How often must a company keep log files for them to be admissible in a court of law?: All log files are admissible in court no matter their frequency, Weekly, Monthly, Continuously

Which principle states that "anyone or anything, entering a crime scene takes something of the scene with them, and leaves something of themselves behind when they leave"?: Evidence Theory of Investigation, Locard‘s Evidence Principle

In conducting a computer abuse investigation you become aware that the suspect of the investigation is using ABC Company as his Internet Service Provider (ISP). You contact ISP and request that they provide you assistance with your investigation. Wha

You are working as Computer Forensics investigator and are called by the owner of an accounting firm to investigate possible computer abuse by one of the firm‘s employees. You meet with the owner of the firm and discover that the company has ne

An Expert witness give an opinion if:: The Opinion, inferences or conclusions depend on special knowledge, skill or training not within the ordinary experience of lay jurors, To define the issues of the case for determination by the finder of fact, T

The police believe that Melvin Matthew has been obtaining unauthorized access to computers belonging to numerous computer software and computer operating systems manufacturers, cellular telephone manufacturers, Internet Service Providers and Educatio

A small law firm located in the Midwest has possibly been breached by a computer hacker looking to obtain information on their clientele. The law firm does not have any on-site IT employees, but wants to search for evidence of the breach themselves t

James is dealing with a case regarding a cybercrime that has taken place in Arizona, USA. James needs to lawfully seize the evidence from an electronic device without affecting the user‘s anonymity. Which of the following law should he comply w

Korey, a data mining specialist in a knowledge processing firm DataHub.com, reported his CISO that he has lost certain sensitive data stored on his laptop. The CISO wants his forensics investigation team to find if the data loss was accident or inten

Which of the following should a computer forensics lab used for investigations have?: isolation, restricted access, open access, an entry log

Julie is a college student majoring in Information Systems and Computer Science. She is currently writing an essay for her computer crimes class. Julie paper focuses on white-collar crimes in America and how forensics investigators investigate the ca

The ____________________ refers to handing over the results of private investigations to the authorities because of indications of criminal activity.: Locard Exchange Principle, lark Standard, Kelly Policy, Silver-Platter Doctrine

You are a security analyst performing reconnaissance on a company you will be carrying out a penetration test for. You conduct a search for IT jobs on Dice.com and find the following information for an open position: 7+ years experience in Windows Se

Which of the following tasks DOES NOT come under the investigation phase of a cybercrime forensics investigation case?: Data collection, Secure the evidence, First response, Data analysis

To make sure the evidence you recover and analyze with computer forensics software can be admitted in court, you must test and validate the software. What group is actively providing tools and creating procedures for testing and validating computer f

With Regard to using an Antivirus scanner during a computer forensics investigation, You should:: Scan the suspect hard drive before beginning an investigation, Never run a scan on your forensics workstation because it could change your systems confi

This organization maintains a database of hash signatures for known software.: International Standards Organization, Institute of Electrical and Electronics Engineers, National Software Reference Library, American National standards Institute

What must be obtained before an investigation is carried out at a location?: Search warrant, Subpoena, Habeas corpus, Modus operandi

While presenting his case to the court, Simon calls many witnesses to the stand to testify. Simon decides to call Hillary Taft, a lay witness, to the stand. Since Hillary is a lay witness, what field would she be considered an expert in?: Technical m

As a CHFI professional, which of the following is the most important to your professional reputation?: Your Certifications, The correct, successful management of each and every case, The fee that you charge, The friendship of local law enforcement of

Pick the statement which does not belong to the Rule 804. Hearsay Exceptions; Declarant Unavailable.: Statement of personal or family history, Prior statement by witness, Statement against interest, Statement under belief of impending death

What should you do when approached by a reporter about a case that you are working on or have worked on?: Refer the reporter to the attorney that retained you, Say, "no comment", Answer all the reporter‘s questions as completely as po

During the course of an investigation, you locate evidence that may prove the innocence of the suspect of the investigation. You must maintain an unbiased opinion and be objective in your entire fact finding process. Therefore, you report this eviden

Under which Federal Statutes does FBI investigate for computer crimes involving e-mail scams and mail fraud?: 18 U.S.C. 1029 Possession of Access Devices, 18 U.S.C. 1030 Fraud and related activity in connection with computers, 18 U.S.1343 Fraud by wi

Davidson Trucking is a small transportation company that has three local offices in Detroit Michigan. Ten female employees that work for the company have gone to an attorney reporting that male employees repeatedly harassed them and that management d

Amelia has got an email from a well-reputed company stating in the subject line that she has won a prize money, whereas the email body says that she has to pay a certain amount for being eligible for the contest. Which of the following acts does the

While working for a prosecutor, what do you think you should do if the evidence you found appears to be exculpatory and is not being released to the defense?: Keep the information of file for later review, Destroy the evidence, Bring the information

The use of warning banners helps a company avoid litigation by overcoming an employee assumed __________________________. When connecting to the company‘s intranet, network or Virtual Private Network(VPN) and will allow the company‘s inve

It takes _____________ mismanaged case/s to ruin your professional reputation as a computer forensics examiner?: by law, three, quite a few, only one, at least two

Which of the following standard represents a legal precedent regarding the admissibility of scientific examinations or experiments in legal cases?: SWGDE & SWGIT, Daubert, Frye, IOCE

For the purpose of preserving the evidentiary chain of custody, which of the following labels is not appropriate?: Relevant circumstances surrounding the collection, General description of the evidence, Exact location the evidence was collected from,

If you discover a criminal act while investigating a corporate policy abuse, it becomes a publicsector investigation and should be referred to law enforcement?: true, false, Dummy,

You are working for a large clothing manufacturer as a computer forensics investigator and are called in to investigate an unusual case of an employee possibly stealing clothing designs from the company and selling them under a different brand name f

You are working as a Computer forensics investigator for a corporation on a computer abuse case. You discover evidence that shows the subject of your investigation is also embezzling money from the company. The company CEO and the corporate legal cou

Steven has been given the task of designing a computer forensics lab for the company he works for. He has found documentation on all aspects of how to design a lab except the number of exits needed. How many exits should Steven include in his design

This type of testimony is presented by someone who does the actual fieldwork and does not offer a view in court.: Civil litigation testimony, Expert testimony, Victim advocate testimony, Technical testimony

When cataloging digital evidence, the primary goal is to: Make bit-stream images of all hard drives, Preserve evidence integrity, Not remove the evidence from the scene, Not allow the computer to be turned off

When is it appropriate to use computer forensics?: If copyright and intellectual property theft/misuse has occurred, If employees do not care for their boss management techniques, If sales drop off for no apparent reason for an extended period of tim

When making the preliminary investigations in a sexual harassment case, how many investigators are you recommended having?: One, Two, Three, Four

____________________ is simply the application of Computer Investigation and analysis techniques in the interests of determining potential legal evidence: Network Forensics, Computer Forensics, Incident Response, Event Reaction

Corporate investigations are typically easier than public investigations because:: the users have standard corporate equipment and software, the investigator does not have to get a warrant, the investigator has to get a warrant, the users can load wh

You are employed directly by an attorney to help investigate an alleged sexual harassment case at a large pharmaceutical manufacture. While at the corporate office of the company, the CEO demands to know the status of the investigation. What prevents

Jason is the security administrator of ACMA metal Corporation. One day he notices the company‘s Oracle database server has been compromised and the customer information along with financial data has been stolen. The financial loss will be in mi

During the course of a corporate investigation, you find that an Employee is committing a crime. Can the Employer file a criminal complaint with Police?: Yes, and all evidence can be turned over to the police, Yes, but only if you turn the evidence o

As a Certified Ethical Hacker, you were contracted by a private firm to conduct an external security assessment through penetration testing. What document describes the specifics of the testing, the associated violations, and essentially protects bot

Which among the following laws emphasizes the need for each Federal agency to develop, document, and implement an organization-wide program to provide information security for the information systems that support its operations and assets?: FISMA, HI

In what way do the procedures for dealing with evidence in a criminal case differ from the procedures for dealing with evidence in a civil case?: evidence must be handled in the same way regardless of the type of case, evidence procedures are not imp

When conducting computer forensic analysis, you must guard against ______________ So that you remain focused on the primary job and insure that the level of work does not increase beyond what was originally expected.: Hard Drive Failure, Scope Creep,

_______ are brought for violation of contracts and lawsuits, where a guilty outcome generally results in monetary damages to the plaintiff.: Criminal Cases, Civil Cases, Administrative Cases,

Which of the following is not part of First Response by Laboratory Forensics Staff ?: Planning the Search and Seizure, Transporting Electronic Evidence, Documenting the Electronic Crime Scene, Make Forensic copy of Digital Evidences

Cases which are generally brought by law enforcement agencies in response to a suspected violation of law, where a guilty outcome may result in monetary damages, imprisonment, or both.: Civil, Criminal, Administrative,

________ refers to an organization’s ability to optimally use digital evidence in a limited period of time and with minimal investigation costs.: Forensic readiness, First Response Team, Cyber security Wing, Policy that determines the pathway

Violation of organization’s policies, rules, or protocols will come under which type of investigation?: Criminal, Civil, Administrative,

ETI investigation can be used to show that individuals commit crimes in furtherance of the criminal enterprise. What does ETI stands for?: Enterprise Theory of Investigation, Ethical Trading Initiative, Ethical Theory of Investigation, Enterprise Tec

It is essential to understand the laws that apply to the investigation including the internal organization policies before starting the investigation process. Identify Rule 901 of forensic laws:: Prohibits malicious mischief, Relevant evidence genera

Rules of evidence govern whether, when, how, and for what purpose proof of a case may be placed before a trier of fact for consideration. In Federal Rules of Evidence, which rule if for Admissibility of Duplicates?: Rule 1002, Rule 1004, Rule 1003, R

Scientific Working Group on Digital Evidence (SWGDE) has defined standards and criteria for the Exchange of Digital Evidence. Which of this SWGDE standards and criteria states that “Procedures used must be generally accepted in the field or support

Ace Your Exams with Our Notes and Mock Tests!

Exam Preparation System

Sitemap- victorylearner.com

Courses

EC-Council: Computer Hacking Forensic Investigator[CHFI-V10]

Computer Forensics in Today's World

Computer Forensics Investigation Process

Understanding Hard Disks and File Systems

Data Acquisition and Duplication

Defeating Anti-forensics Techniques

Windows Forensics

Linux and Mac Forensics

Network Forensics

Investigating Web Attacks

Dark Web Forensics

Database Forensics

Cloud Forensics

Investigating Email Crimes

Malware Forensics

Mobile Forensics

IoT Forensics

Special Topics & Out of syllabus

Cisco Certified Network Associate[CCNA]

Network Fundamentals

Network Access

IP Connectivity

IP Services

Security Fundamentals

Automation and Programmability

Plus One (+1) Chem[CBSE]

Some Basic Concepts of Chemistry

Structure of Atom

Classification of Elements and Periodicity in Properties

Chemical Bonding and Molecular Structure

Thermodynamics

Equilibrium

Redox Reactions

Organic Chemistry: Some basic Principles and Techniques

Hydrocarbons

Model Question Papers and Special Topics

WELCOME TO ONLINE EXAM PREPARATION SYSTEM

Certification Examinations