ACE Industry Regulations & Compliance 5

Question 1

Which provision of the USA PATRIOT Act most directly expanded law enforcement's ability to conduct surveillance and obtain records relevant to digital forensic investigations?

Accepted Answer

Section 215 — business records and tangible things

Answer

Section 215 of the PATRIOT Act authorized the FBI to compel production of 'any tangible thing' including business records relevant to foreign intelligence or terrorism investigations.

Question 2

When an ACE-certified examiner testifies as an expert witness, Federal Rule of Evidence 702 requires that expert testimony be based on sufficient facts and that the methodology be:

Accepted Answer

The product of reliable principles reliably applied to the facts

Answer

FRE 702 (codifying Daubert) requires expert testimony to be based on sufficient facts, reliable methodology, and reliable application of that methodology to the case facts.

Question 3

Under ISO/IEC 27037:2012, what is the correct sequence of actions when handling digital evidence at a scene?

Accepted Answer

Identify, collect, acquire, preserve

Answer

ISO/IEC 27037 specifies that digital evidence handling follows the sequence: identify, collect, acquire (create forensic image), and preserve the integrity of evidence.

Question 4

Which U.S. regulation requires financial institutions to file a Suspicious Activity Report (SAR) within 30 days of detecting a transaction that may involve money laundering, and is relevant when forensic findings reveal illicit financial flows?

Accepted Answer

Bank Secrecy Act (BSA) / FinCEN regulations

Answer

The Bank Secrecy Act, enforced through FinCEN regulations, requires financial institutions to file SARs within 30 days of detecting suspicious transactions that may involve money laundering or other crimes.

Question 5

A forensic examiner in a state with mandatory data breach notification laws discovers a breach involving Social Security numbers. In most U.S. states, the notification obligation is typically triggered when:

Accepted Answer

Unauthorized acquisition of unencrypted personal information is reasonably believed to have occurred

Answer

Most state breach notification laws trigger the notification duty when there is reasonable belief that unencrypted personal information was acquired without authorization, regardless of the number of individuals affected.

(ACE) AccessData Certified Examiner Practice Test

(ACE) AccessData Certified Examiner Practice Test

ACE Industry Regulations & Compliance 5