CSI CSI - Crime Scene Investigator Digital and Electronic Evidence Questions and Answers 2

Question 1

When collecting a smartphone at a crime scene, what should an investigator do to prevent remote wiping?

Accepted Answer

Place it in airplane mode or a Faraday bag

Answer

Isolating the phone from networks prevents a suspect or third party from remotely wiping or altering the device's data.

Question 2

What is the primary purpose of a Faraday bag in digital evidence collection?

Accepted Answer

To block all wireless signals and prevent remote access

Answer

A Faraday bag blocks electromagnetic signals, preventing remote commands such as wipe orders from reaching the device.

Question 3

Which of the following is NOT a form of digital evidence?

Accepted Answer

Fingerprint powder residue

Answer

Fingerprint powder residue is physical trace evidence, not digital evidence.

Question 4

What should be documented when seizing digital devices at a crime scene?

Accepted Answer

The device, its connections, surrounding environment, and current operational state

Answer

Comprehensive documentation of all aspects of the device and its environment is essential to maintaining evidentiary value.

Question 5

In digital forensics, what does 'chain of custody' refer to?

Accepted Answer

The documented history of who collected, handled, and stored the evidence

Answer

Chain of custody documents every person who handled the evidence to ensure its integrity and admissibility in court.

(CSI) Crime Scene Investigator Practice Test