ACE Industry Regulations & Compliance 4

Question 1

In digital forensics, what does the legal concept of 'proportionality' as established under FRCP Rule 26(b)(1) govern?

Accepted Answer

The scope of ESI discovery relative to the needs of the case

Answer

The ratio of hash algorithm strength to file size

Answer

The number of forensic examiners required per case

Answer

The encryption standard required for evidence transport

Question 2

Which executive order or federal directive requires U.S. federal agencies to adopt the NIST Cybersecurity Framework for managing cybersecurity risk?

Accepted Answer

Executive Order 13800

Answer

Executive Order 13526

Answer

Executive Order 13636 / Presidential Policy Directive 21

Answer

Executive Order 12333

Question 3

Under CIPA (Children's Internet Protection Act), what must schools and libraries do to receive E-rate discounts, which is relevant to forensic investigations of educational institutions?

Accepted Answer

Adopt technology protection measures including internet filtering

Answer

Implement HTTPS on all school websites

Answer

Encrypt all student records at rest

Answer

Report all cybersecurity incidents to the FTC within 72 hours

Question 4

When preserving ESI under a litigation hold, what is the examiner's primary obligation regarding the organization's automatic email deletion policies?

Accepted Answer

Suspend auto-deletion for potentially relevant data upon notice of litigation

Answer

Continue auto-deletion unless a court order prohibits it

Answer

Encrypt emails before deletion to demonstrate good faith

Answer

Notify opposing counsel before any deletion occurs

Question 5

The Computer Fraud and Abuse Act (CFAA) 18 U.S.C. § 1030 prohibits unauthorized access to protected computers. Which element is most critical to establishing a CFAA violation?

Accepted Answer

Access must have been 'without authorization' or 'exceeding authorized access'

Answer

The defendant must have caused more than $500 in damages

Answer

The crime must cross state lines to be federal

Answer

The defendant must have used encryption to conceal the intrusion

Question 6

In which scenario would FERPA (Family Educational Rights and Privacy Act) most directly impact a forensic examiner's ability to access student records during an investigation?

Accepted Answer

When examining a student's academic records without written consent or valid exception

Answer

When investigating a university's financial fraud involving federal grants

Answer

When analyzing network logs showing unauthorized access from student IPs

Answer

When recovering deleted files from a faculty member's university laptop

Question 7

Under the EU-U.S. Data Privacy Framework, what is required for U.S. companies to lawfully transfer personal data from the EU for forensic analysis?

Accepted Answer

Self-certifying compliance with the framework's data protection principles

Answer

Filing a transfer impact assessment with the FTC

Answer

Obtaining explicit consent from every data subject

Answer

Storing all EU data exclusively on EU-based servers