Evidence Collection & Case Analysis Flashcards
7 cards from real CFC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Evidence Collection & Case Analysis flashcards as text
When collecting digital evidence from a suspect's smartphone, which technique best preserves data integrity?
Answer: Creating a forensic image using write-blocking hardware before any analysis
Write-blocking hardware prevents any data from being written to the device during imaging, preserving original evidence integrity.
A forensic consultant discovers that a key witness has stored relevant emails on a third-party cloud server outside the U.S. What is the primary legal mechanism for obtaining this data?
Answer: Mutual Legal Assistance Treaty (MLAT) or letters rogatory
MLATs and letters rogatory are the proper international legal mechanisms for obtaining evidence stored in foreign jurisdictions.
Which of the following BEST describes the 'Locard's Exchange Principle' as applied to forensic evidence collection?
Answer: Every contact between two objects results in an exchange of material
Locard's Exchange Principle states that whenever two objects come into contact, each transfers material to the other.
During case analysis, a forensic consultant notes that two independent witnesses provided nearly identical accounts using the same unusual phrasing. What does this suggest?
Answer: The witnesses may have coordinated their stories or been coached
Suspiciously identical language between independent witnesses is a red flag that accounts may have been coordinated or rehearsed.
In forensic document examination, what is 'indented writing' analysis used to detect?
Answer: Impressions left on underlying pages from writing on a page above
Indented writing analysis uses tools like the ESDA to reveal impressions left on paper beneath the sheet that was actually written on.
A forensic consultant is asked to reconstruct a fire scene. Which type of evidence would most reliably indicate the fire's point of origin?
Answer: Char patterns, burn depth variations, and V-shaped burn marks
Char patterns, burn depth, and V-shaped burn marks provide physical indicators that help reconstruct fire progression back to its origin.
What is the purpose of a 'chain of custody' document in forensic case management?
Answer: To chronologically record every person who accessed, handled, or transferred evidence
Chain of custody documents create an unbroken record of evidence possession, handling, and transfer to ensure admissibility.