Legal & Ethical Issues in Digital Forensics Flashcards
7 cards from real CCE practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Legal & Ethical Issues in Digital Forensics flashcards as text
Under the Fourth Amendment, which standard must law enforcement meet to obtain a warrant for digital evidence?
Answer: Probable cause
The Fourth Amendment requires probable cause supported by oath or affirmation before a warrant can be issued.
Which federal law specifically prohibits unauthorized interception of electronic communications?
Answer: Electronic Communications Privacy Act
The Electronic Communications Privacy Act (ECPA) of 1986 prohibits unauthorized interception of wire, oral, and electronic communications.
A forensic examiner discovers child exploitation material during an authorized corporate investigation. What is the FIRST required action?
Answer: Report to law enforcement and preserve evidence
Mandatory reporting laws require immediate notification to law enforcement, and evidence must be preserved per legal obligations.
The 'plain view' doctrine in digital forensics allows examiners to:
Answer: Seize evidence found in plain sight during a lawful search
The plain view doctrine permits seizure of evidence that is immediately apparent and observed during a lawful search.
Which privacy law governs the handling of student educational records and may impact a digital forensics investigation at a school?
Answer: FERPA
The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student education records and restricts disclosure.
What is 'chain of custody' documentation primarily designed to ensure?
Answer: That evidence integrity and handling history are verifiable in court
Chain of custody documents every person who handled evidence and all actions taken, ensuring its integrity is defensible in court.
A private employer wants to monitor employee emails on company systems. Which statement is MOST accurate legally?
Answer: Employers generally may monitor company systems if employees have been notified
Employers generally have the right to monitor company-owned systems, especially when employees are notified through acceptable use policies.