CFE Case Documentation & Evidence Management 5

Question 1

A forensic examiner receives two hard drives submitted as evidence but labeled identically. What is the IMMEDIATE documentation priority?

Accepted Answer

Assign unique identifiers to each drive and document distinguishing physical characteristics

Answer

Unique identifiers must be assigned immediately to prevent confusion between items and ensure each piece of evidence can be tracked independently throughout the case.

Question 2

What is the significance of documenting the 'scope of examination' in a forensic case file?

Accepted Answer

It establishes what was and was not examined, protecting against later allegations of incompleteness

Answer

Documenting the examination scope creates a clear record of what was authorized, attempted, and accomplished, providing a defense against claims of oversight or negligence.

Question 3

Which principle governs how long law enforcement agencies must retain physical evidence from an unresolved criminal case?

Accepted Answer

Retention is governed by applicable statutes of limitations and agency policy

Answer

Evidence retention requirements are governed by applicable statutes of limitations for the offense, jurisdiction-specific laws, and agency policies.

Question 4

When transferring custody of evidence between two examiners, which action is MANDATORY to maintain chain of custody?

Accepted Answer

Both parties must sign and date a transfer log documenting the handoff

Answer

A signed and dated transfer log is the minimum documentation required to establish an unbroken chain of custody during any evidence handoff.

Question 5

A forensic examiner is asked to re-examine evidence that was previously analyzed by another examiner. Which document is MOST important to review first?

Accepted Answer

The prior examination report, case file, and chain of custody records

Answer

The prior examination report, case file, and chain of custody records provide essential context about what was previously done and the history of evidence handling.

(CFE) Certified Forensic Examiner Practice Test

(CFE) Certified Forensic Examiner Practice Test

CFE Case Documentation & Evidence Management 5