After a judge approves and signs a search warrant, the _______ is responsible for the collection of evidence as defined by the warrant.

A. Digital Evidence Recorder
B. ​Digital Evidence Specialist
C. Digital Evidence First Responder
D. Digital Evidence Scene Investigator

​After the evidence has been presented in a trial by jury, the jury must deliver a(n) _______.

A. exhibit
B. ​affidavit
C. ​allegation
D. verdict

​An evidence custody form does not usually contain _______.

A. ​the nature of the case
B. a description of evidence
C. vendor names for computer components
D. a witness list

​The _______ is not one of the three stages of a typical criminal case.

A. complaint
B. investigation
C. civil suit
D. prosecution

​Within a computing investigation, the ability to perform a series of steps again and again to produce the same results is known as _______.

A. repeatable findings
B. reloadable steps
C. verifiable reporting
D. evidence reporting

A chain-of-evidence form, which is used to document what has and has not been done with the original evidence and forensic copies of the evidence, is also known as a(n) _______.

A. ​single-evidence form
B. multi-evidence form
C. evidence custody form
D. evidence tracking form

If a police officer or investigator has sufficient cause to support a search warrant, the prosecuting attorney might direct him or her to submit a(n) _______.​

A. exhibit
B. verdict
C. affidavit
D. memo

In what year was the Computer Fraud and Abuse Act passed?​

A. 1976
B. ​1980
C. 1986
D. 1996

Signed into law in 1973, the _______ was/were created to ensure consistency in federal proceedings.

A. Federal Proceedings Law
B. Federal Rules of Evidence
C. Federal Consistency Standards
D. ​Federal Proceedings Rules

The _______ is responsible for analyzing data and determining when another specialist should be called in to assist with analysis.

A. Digital Evidence First Responder
B. Digital Evidence Specialist
C. ​Digital Evidence Analyst
D. Digital Evidence Examiner

The sale of sensitive or confidential company information to a competitor is known as _______.

A. ​industrial sabotage
B. industrial espionage
C. ​industrial collusion
D. industrial betrayal

The term _______ describes a database containing informational records about crimes that have been committed previously by a criminal.

A. police ledger
B. police blotter
C. ​police blogger
D. police recorder

What tool, currently maintained by the IRS Criminal Investigation Division and limited to use by law enforcement, can analyze and read special files that are copies of a disk?

A. ​AccessData Forensic Toolkit
B. DeepScan
C. ​ILook
D. Photorec

Which Microsoft OS below is the least intrusive to disks in terms of changing data?​

A. ​Windows 95
B. Windows XP
C. Windows 7
D. MS-DOS 6.22

Which amendment to the U.S. Constitution protects everyone's right to be secure in their person, residence, and property from search and seizure?​

A. First Amendment
B. Second Amendment
C. Fourth Amendment
D. ​Fifth Amendment

Which option below is not a standard systems analysis step?​

A. Determine a preliminary design or approach to the case.
B. Obtain and copy an evidence drive.
C. ​Share evidence with experts outside of the investigation.
D. Mitigate or minimize the risks.

_______ describes an accusation of fact that a crime has been committed.

A. Attrition
B. Attribution
C. Allegation
D. Assignment

_______ is not one of the functions of the investigations triad.

A. Digital investigations
B. Data recovery
C. Vulnerability/threat assessment and risk management
D. Network intrusion detection and incident response

_______ is not recommended for a digital forensics workstation.

A. A text editor tool
B. ​A write-blocker device
C. An SCSI card
D. ​Remote access software

_______ must be included in an affidavit to support an allegation in order to justify a warrant.

A. Verdicts
B. Witnesses
C. Exhibits
D. Subpoenas