CFP Forensic Image Metadata & Authentication 2

Question 1

What device should a forensic photographer use when transferring images from a camera's memory card to a computer to prevent unintentional modification of original files?

Accepted Answer

A hardware write blocker

Answer

A hardware write blocker prevents any write operations to the source media during transfer, ensuring the original files cannot be modified, overwritten, or have their metadata updated.

Question 2

Which EXIF metadata field records the precise date and time a forensic photograph was originally captured?

Accepted Answer

DateTimeOriginal

Answer

The DateTimeOriginal EXIF field records the exact date and time the image was captured in-camera, which is critical for establishing a verifiable forensic timeline.

Question 3

In digital forensics terminology, what is a 'forensic image' distinct from a crime scene photograph?

Accepted Answer

A bit-for-bit exact duplicate of a digital storage device preserving all data

Answer

In digital forensics, a 'forensic image' specifically means a bit-for-bit exact duplicate of a storage device, preserving all data including deleted files and file system metadata.

Question 4

What type of log should forensic photographers maintain alongside their image files to document post-processing steps?

Accepted Answer

A processing notes log documenting all adjustments applied to images

Answer

Any post-processing adjustments must be documented in a processing notes log so courts can evaluate how original images were modified and whether modifications are permissible.

Question 5

What does 'non-destructive editing' mean in the context of forensic image processing?

Accepted Answer

Processing that preserves the original image file while storing adjustments separately

Answer

Non-destructive editing preserves the original image data unmodified while any adjustments are stored in a separate layer or sidecar file, ensuring the original can always be verified.

(CFP) Certified Forensic Photographer Practice Test

(CFP) Certified Forensic Photographer Practice Test

CFP Forensic Image Metadata & Authentication 2