CHFI Computer Hacking Forensic Investigator Quiz 03

Question 1 of 10

1. Question

Which of the following example is a way for a forensic investigator to obtain evidence from computer when cybercrime occurs?

To analyze the overall location via blue ray light
To recover data from all the log file
The fingerprint from the door handle
To set up the evidence exactly like the original scene

Question 2 of 10

2. Question

Which of the following is the correct procedures when recovering a data from cybercrime incident?

To plug in an external storage media and transfer the data
To use the fastest and cheapest technique while doing the investigation
To share the data with another colleague for safekeeping
By using specific forensic software

Question 3 of 10

3. Question

Photography plays an important role in the crime scene during handling the evidence. Which of the following is the correct step that should be done during the photographing process?

To ensure the spotlight is always on
To take the items under sunlight
To display the position of the equipment exactly like the crime scene
To snap the front and back of the machine

Question 4 of 10

4. Question

Forensic is a way to identify and preserve evidence and present it for an investigation. Which one is one of the consequences when evidence is compromised?

The whole forensic team would be dismissed
A person who committed a crime will go unpunished
All the equipment will be sold to an outsider
It will impact the reputation of the team

Question 5 of 10

5. Question

Authentication is very important to confirm that all the data from the original devices are duplicated correctly without any alternation. Which of the following shows the consequence when the evidence is corrupted?

All the evidence will be present in court
They unable to proceed with the investigation
To affect the accuracy of computer forensic when examining the data
The equipment will be sold to an outsider

Question 6 of 10

6. Question

What is the important concept should be remembered when handling and examining the evidence or data during the analysis process for cybercrime?

To do examination by using the original data
To make some changes on the properties of the file
To ensure that the data are all original and never being modified in any way
To open an image in PNG and JPG form

Question 7 of 10

7. Question

It is vital for forensic investigation to secure the data and equipment from the crime scene and ensure the authentication. Which of the following best describes the reason?

The evidence can sell at a high price
It will lower the credibility of the other evidence collected together
It needs to be present to the higher management
The court will still accept and recognize the data that are lost, altered, or damaged.

Question 8 of 10

8. Question

Data retention should be done even the overall cybercrime investigation completed, and some team will retain their file for few years before deleting them. What is the main purpose of this?

To keep the storeroom full of documentation
To standby if any appeal or other legal issue in the next few years
To grant access to the outsider enter to read at any time
Store it for future reference

Question 9 of 10

9. Question

The first responder of a cybercrime incident must firstly able to identify and establish the scale of the crime scene and secure the spot area. Which of the following best describes the purpose of this action?

To consult legal counsel
To prevent non-relevant personnel enter the area and manipulate the system
To encourage others to take pictures on the crime scene
To show respect to the people who committed a crime

Question 10 of 10

10. Question

The crime scene needs to be secured and prevent from modification or destroyed intentionally by others. Which of the following is the correct way to ensure the safety of all the data and system?

To make three copied of the data
Everyone who has a presence in the scene or access to the affected system needs to undergo testify
To submit a name list to the court who has the access to an affected system
An only key person has the password access

CHFI Computer Hacking Forensic Investigator Quiz 03

Quiz-summary

Information

Results

Categories