CFI Digital & Cyber Investigation 3

Question 1

Which type of malware is most directly associated with causing physical damage to industrial control systems that could result in fire?

Accepted Answer

SCADA-targeting malware (e.g., Stuxnet-type)

Answer

SCADA-targeting malware like Stuxnet can override safety limits on industrial equipment, causing overloads or mechanical failures that lead to fires.

Question 2

When examining a fire-damaged smartphone, investigators should prioritize extracting data from which storage location first?

Accepted Answer

The cloud backup

Answer

Cloud backups are offsite and unaffected by the fire, making them the easiest and most intact source of data to retrieve quickly.

Question 3

A CFI investigates a fire at a cryptocurrency mining facility. Which specific hazard unique to mining operations should be documented?

Accepted Answer

Overloaded electrical circuits from continuous high-draw GPUs

Answer

Cryptocurrency mining rigs run GPUs at near-maximum load continuously, often overloading circuits not designed for such sustained high amperage draw.

Question 4

In a fire investigation involving a corporate server room, the investigator needs to preserve volatile evidence. Which item contains data that will be LOST when power is cut?

Accepted Answer

RAM containing running processes

Answer

RAM is volatile memory — all data including running processes, network connections, and encryption keys is permanently lost when power is removed.

Question 5

What is the primary legal requirement for obtaining cloud-stored evidence from a U.S.-based provider during a fire investigation with criminal implications?

Accepted Answer

A subpoena or court order under the Stored Communications Act

Answer

The Stored Communications Act (18 U.S.C. § 2703) requires law enforcement to obtain a subpoena, court order, or warrant to compel cloud providers to disclose user data.

(CFI) Certified Fire Investigator Practice Test

(CFI) Certified Fire Investigator Practice Test

CFI Digital & Cyber Investigation 3