ACE Legal, Ethical & Reporting Standards 3

Question 1

Under what circumstances may a private employer legally search an employee's company-issued computer without a warrant?

Accepted Answer

Generally always, because employees have a reduced expectation of privacy on employer-owned devices

Answer

Employees typically have a reduced expectation of privacy on employer-owned equipment, especially when usage policies notify them of monitoring.

Question 2

What is the primary purpose of maintaining a detailed chain of custody log for digital evidence?

Accepted Answer

To document every person who accessed the evidence and when, ensuring integrity and admissibility

Answer

Chain of custody documentation ensures that evidence integrity can be verified and that admissibility challenges related to tampering can be defended.

Question 3

The Computer Fraud and Abuse Act (CFAA) defines 'unauthorized access' as:

Accepted Answer

Accessing a computer without permission or exceeding authorized access

Answer

The CFAA prohibits intentionally accessing a computer without authorization or in excess of authorized access.

Question 4

In a forensic examination report, an 'opinion section' should clearly distinguish that the content represents:

Accepted Answer

The examiner's expert interpretation based on observed evidence

Answer

Opinion sections must be labeled as expert interpretation to separate factual findings from analytical conclusions.

Question 5

When an ACE examiner testifies as an expert witness, their primary duty is to:

Accepted Answer

Provide truthful, impartial testimony based on their findings

Answer

Expert witnesses owe their primary duty to the court, not to the retaining party—testimony must be truthful and impartial.

(ACE) AccessData Certified Examiner Practice Test

(ACE) AccessData Certified Examiner Practice Test

ACE Legal, Ethical & Reporting Standards 3