← All CPI Flashcard Decks

Technology & Digital Tools Flashcards

7 cards from real CPI practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Technology & Digital Tools flashcards as text
  1. Which type of metadata embedded in digital photos can reveal the exact GPS coordinates where the image was taken?

    Answer: EXIF data

    EXIF (Exchangeable Image File Format) data stores camera settings, timestamps, and GPS coordinates within digital image files.

  2. An investigator needs to capture a suspect's online activity without alerting the subject. Which tool is MOST appropriate for passive network traffic analysis?

    Answer: Wireshark packet analyzer

    Wireshark is a passive packet-capture tool that monitors network traffic without sending probes, making it suitable for covert analysis.

  3. When performing open-source intelligence (OSINT) on a subject, which technique allows an investigator to find cached or deleted web pages?

    Answer: Using the Wayback Machine / archive.org

    The Wayback Machine archives historical snapshots of websites, allowing investigators to view pages that have been modified or deleted.

  4. A cell phone's IMEI number is MOST useful in an investigation for:

    Answer: Uniquely identifying the physical device regardless of SIM card

    The IMEI (International Mobile Equipment Identity) is a hardware identifier tied to the device itself, not the subscriber or SIM.

  5. Which court doctrine governs whether evidence obtained from a suspect's computer without a warrant is admissible?

    Answer: Fourth Amendment exclusionary rule

    The Fourth Amendment's exclusionary rule bars admission of evidence obtained through unreasonable, warrantless searches of private digital devices.

  6. In digital forensics, a 'write blocker' is used to:

    Answer: Prevent any data from being written to the evidence drive during imaging

    A write blocker is a hardware or software tool that allows read-only access to storage media, preserving its integrity during forensic imaging.

  7. Which social media investigation technique involves creating a fictitious online profile to observe a subject's activity without their knowledge?

    Answer: Sock puppet account

    A sock puppet is a fake identity used by investigators to passively monitor a subject's public or semi-public social media posts.