CSX Criminal Investigation Procedures 2

Question 1

Under the Fourth Amendment, law enforcement generally requires a search warrant to access stored electronic communications that are older than how many days, per the Electronic Communications Privacy Act (ECPA)?

Accepted Answer

180 days

Answer

ECPA's original threshold treats stored communications older than 180 days as abandoned, historically allowing access with a subpoena rather than a warrant, though courts increasingly require warrants regardless.

Question 2

What is the primary legal authority under US federal law that criminalizes unauthorized access to computer systems?

Accepted Answer

Computer Fraud and Abuse Act

Answer

The Computer Fraud and Abuse Act (CFAA), 18 U.S.C. § 1030, is the primary federal statute criminalizing unauthorized computer access and related offenses.

Question 3

During a cybercrime investigation, an investigator discovers logs showing an attacker pivoted through systems in three different countries. Which organization is best positioned to coordinate this multi-jurisdictional investigation?

Accepted Answer

INTERPOL Cybercrime Directorate

Answer

INTERPOL's Cybercrime Directorate facilitates cross-border coordination among member nations' law enforcement agencies for international cybercrime investigations.

Question 4

A forensic examiner receives a hard drive from law enforcement. What should be the FIRST step before any analysis?

Accepted Answer

Create a bit-for-bit forensic image

Answer

Creating a bit-for-bit forensic image preserves the original evidence and ensures the original drive is not modified during analysis.

Question 5

Which legal doctrine allows evidence obtained during an unlawful search to be excluded from trial?

Accepted Answer

Fruit of the poisonous tree

Answer

The 'fruit of the poisonous tree' doctrine holds that evidence derived from an illegal search or seizure is inadmissible because it is tainted by the initial constitutional violation.

(CSX) Cybersecurity Nexus Certification Practice Test

(CSX) Cybersecurity Nexus Certification Practice Test

CSX Criminal Investigation Procedures 2