CFL Forensic Analysis & Evidence Handling 3 — Questions and Answers
Question 1: A 'witness mark' in forensic locksmithing refers to:
- Testimony from a bystander who observed the break-in
- An undisturbed reference area adjacent to a toolmark used to gauge original surface condition (Correct answer)
- The manufacturer's inspection stamp on a lock component
- A mark left by the responding officer's tools during entry
Correct answer: An undisturbed reference area adjacent to a toolmark used to gauge original surface condition
A witness mark is an untouched reference area near a toolmark that shows the original surface finish for comparison purposes.
Question 2: When a forensic locksmith discovers a lock has been 'shimmed,' which component would show the characteristic evidence?
- The keyway warding
- The shear line area between the plug and shell (Correct answer)
- The bottom pins
- The cam or tailpiece
Correct answer: The shear line area between the plug and shell
Shimming bypasses the shear line by inserting a thin tool between the plug and shell, leaving marks at that interface.
Question 3: Electrostatic Lifting Apparatus (ESLA) is used in forensic investigations primarily to:
- Dust lock surfaces for latent fingerprints
- Lift latent footwear impressions from hard surfaces (Correct answer)
- Magnetize metal filings near a lock
- Illuminate ultraviolet-reactive trace evidence
Correct answer: Lift latent footwear impressions from hard surfaces
ESLA uses an electrostatic charge to lift dust impressions of footwear from hard surfaces, preserving pattern details.
Question 4: A forensic locksmith notes fresh bright metal 'spall' on the face of a padlock shackle. This is MOST consistent with:
- Corrosion from environmental exposure
- Bolt cutter attack on the shackle (Correct answer)
- Acid attack to weaken the metal
- Normal shackle insertion wear
Correct answer: Bolt cutter attack on the shackle
Bolt cutter attacks leave fresh, bright metal spall and compression deformation on the shackle at the cut site.
Question 5: When completing a forensic lock examination report, the examiner must distinguish between:
- Their personal opinion and established facts from examination (Correct answer)
- Federal and state crime classifications
- The victim's account and the suspect's account
- Civil and criminal case requirements
Correct answer: Their personal opinion and established facts from examination
A credible forensic report clearly separates objective findings from interpretive conclusions to withstand legal scrutiny.
Question 6: Which term describes the forensic examination of a lock to determine whether it was picked, and if so, the most likely tool used?
- Locksmith triage
- Forensic lock analysis (Correct answer)
- Key control audit
- Security vulnerability assessment
Correct answer: Forensic lock analysis
Forensic lock analysis is the systematic examination of a lock's internal and external components to determine if manipulation occurred and identify the method.
Question 7: A rekeyed lock submitted as evidence should be noted in the report because:
- Rekeying improves security and has no forensic relevance
- Rekeying may have destroyed pin-tumbler toolmark evidence inside the cylinder (Correct answer)
- Rekeying is illegal without owner consent
- Rekeying always leaves visible external marks
Correct answer: Rekeying may have destroyed pin-tumbler toolmark evidence inside the cylinder
Rekeying replaces key pins and may remove or displace trace evidence or toolmarks within the cylinder, compromising forensic value.
CFL Forensic Analysis & Evidence Handling 3
A 'witness mark' in forensic locksmithing refers to: