Evidence Collection & Case Analysis Flashcards

A forensic consultant is analyzing a questioned will to determine if it was backdated. Which physical evidence would be MOST probative?

Answer: Ink chemistry analysis showing ink components not commercially available until after the document's stated date

Ink dating using chemical analysis can identify components introduced to the market after a document's purported date, proving backdating.

During an autopsy-linked forensic investigation, a consultant needs to determine if injuries are consistent with a fall or a beating. Which characteristic BEST differentiates defensive wounds from impact injuries?

Answer: Defensive wounds typically appear on forearms, hands, and outer aspects of arms from protective posturing

Defensive wounds occur on the forearms, palms, and outer arms because victims instinctively raise their arms to protect themselves from blows.

A forensic consultant analyzing network intrusion evidence discovers logs showing repeated failed login attempts followed by a successful login. What attack pattern does this indicate?

Answer: Brute-force or credential stuffing attack

Multiple failed login attempts followed by success is the hallmark signature of a brute-force or credential stuffing attack.

In forensic accounting, the 'net worth method' for detecting unreported income compares which two factors?

Answer: Increase in net worth plus personal living expenses against known legitimate income sources

The net worth method detects unreported income by showing that a taxpayer's wealth increased and expenses were incurred beyond what their reported income could explain.

A forensic consultant is asked to review surveillance footage as evidence. Which factor would MOST undermine the footage's evidentiary value?

Answer: A gap in the recording timestamp sequence suggesting possible deletion or editing

Timestamp gaps in surveillance footage suggest potential tampering, raising serious questions about the recording's authenticity and completeness.

When a forensic consultant performs a scene reconstruction, which principle requires that the reconstruction be consistent with ALL physical evidence rather than selectively applied?

Answer: Principle of parsimony — the simplest explanation consistent with all evidence is preferred

The principle of parsimony (Occam's Razor) directs forensic analysts to prefer the simplest explanation that accounts for all observed evidence without unnecessary assumptions.

A forensic consultant working a vehicular accident case needs to determine vehicle speed at impact. Which type of physical evidence provides the MOST reliable pre-braking speed calculation?

Answer: Tire skid mark length combined with road surface friction coefficient

Skid mark length combined with known road surface friction coefficients can be used in standard deceleration formulas to calculate minimum pre-braking speed.