Questions

1. Which of the following should be included in your response kit?

   a. A digital camera

   b. Latex gloves

   c. A write-blocking device

   d. All of the above

2. You must use commercial software to perform a valid forensic examination.

   a. True

   b. False

3. What questions need to be asked when you receive digital evidence?

   a. Why was the digital evidence seized?

   b. Where is the chain of custody?

   c. Who has accessed the evidence?

   d. All of the above

4. RAM is the most volatile of evidence.

   a. True

   b. False

5. The chain of custody documents _____________.

   a. Who accessed the evidence

   b. Who witnessed the crime

   c. The suspect's fingerprints

   d. None of the above

6. Which of the following is best for a digital forensic exam?

   a. A forensic copy

   b. A forensic image

   c. A logical forensic image

   d. Both B and C

7. Which of the following is a hashing algorithm?

   a. CDC

   b. FBI

   c. MD5

   d. LSD

The answers can be found at the end of the book in the Assessments section.