CSI CSI - Crime Scene Investigator Digital and Electronic Evidence Questions and Answers 2

Question 1

When collecting a smartphone at a crime scene, what should an investigator do to prevent remote wiping?

Accepted Answer

Place it in airplane mode or a Faraday bag

Answer

Plug it in to charge it

Answer

Power it off immediately

Answer

Connect it to a computer for extraction

Question 2

What is the primary purpose of a Faraday bag in digital evidence collection?

Accepted Answer

To block all wireless signals and prevent remote access

Answer

To protect electronics from physical damage

Answer

To keep electronics dry during transport

Answer

To prevent static electricity damage

Question 3

Which of the following is NOT a form of digital evidence?

Accepted Answer

Fingerprint powder residue

Answer

Browser history

Answer

Text messages

Answer

Email communications

Question 4

What should be documented when seizing digital devices at a crime scene?

Accepted Answer

The device, its connections, surrounding environment, and current operational state

Answer

Only the device serial number

Answer

Only whether the device is powered on or off

Answer

Only the brand and model of the device

Question 5

In digital forensics, what does 'chain of custody' refer to?

Accepted Answer

The documented history of who collected, handled, and stored the evidence

Answer

A series of passwords used to access devices

Answer

The encryption sequence used to secure files

Answer

A network of connected devices seized together

Question 6

What is 'slack space' in digital forensics?

Accepted Answer

The area between the end of a file and the end of its allocated cluster that may retain old data

Answer

Unused space in a hard drive partition

Answer

Empty folders remaining on a hard drive

Answer

Free space on optical storage discs