NCIC NCIC Cybersecurity & Digital Intelligence 2 — Questions and Answers
Question 1: What is 'social network analysis' (SNA) used for in criminal intelligence?
- Managing law enforcement official social media accounts
- Mapping relationships between individuals, organizations, or events to identify key actors in criminal networks (Correct answer)
- Monitoring employees' internet usage for policy compliance
- Analyzing popularity metrics on crime-related social media content
Correct answer: Mapping relationships between individuals, organizations, or events to identify key actors in criminal networks
Social network analysis maps and measures relationships between entities to identify key influencers, connectors, and vulnerabilities within criminal networks.
Question 2: What is 'chain of custody' as it applies to digital evidence in criminal investigations?
- The hierarchy of command authority in law enforcement agencies
- The documented chronological record tracking who handled digital evidence and what actions were taken with it (Correct answer)
- A list of digital crime suspects linked to a specific investigation
- The technical sequence of steps in a cyberattack incident
Correct answer: The documented chronological record tracking who handled digital evidence and what actions were taken with it
Chain of custody is a documented record of every person who handled digital evidence and every action taken with it, ensuring its integrity and legal admissibility.
Question 3: What is 'phishing' in the context of cyber threats that criminal intelligence analysts must understand?
- A recreational activity used as cover for criminal meetings
- A social engineering attack using deceptive emails or messages to obtain sensitive information or install malware (Correct answer)
- A law enforcement technique for tracking criminal networks online
- A digital forensics method for recovering deleted files
Correct answer: A social engineering attack using deceptive emails or messages to obtain sensitive information or install malware
Phishing is a social engineering attack where deceptive emails or messages trick recipients into revealing sensitive information or downloading malicious software.
Question 4: What role does cryptocurrency play in criminal intelligence analysis?
- It is exclusively used by government agencies for secure transactions
- It enables relatively anonymous financial transactions used in money laundering and illicit commerce (Correct answer)
- It is a law enforcement-controlled digital currency for evidence seizures
- It provides a digital signature system for court documents
Correct answer: It enables relatively anonymous financial transactions used in money laundering and illicit commerce
Cryptocurrency's decentralized nature facilitates relatively anonymous financial transactions, making it attractive for criminal money laundering and illicit marketplace activity.
Question 5: What is the role of a 'hash value' in digital evidence verification?
- To encrypt classified intelligence reports for secure transmission
- To generate a unique digital fingerprint verifying that a file's content has not been altered (Correct answer)
- To identify the author of an anonymous online communication
- To compress large data files for more efficient storage
Correct answer: To generate a unique digital fingerprint verifying that a file's content has not been altered
A hash value is a unique alphanumeric string generated from a file's contents that verifies its integrity — any alteration to the file produces a completely different hash value.
Question 6: What does 'IP address geolocation' provide investigators in a digital investigation?
- The precise physical street address of a computer or device
- An approximate geographic location associated with an internet connection (Correct answer)
- The confirmed identity and name of the device's owner
- A complete record of a user's browsing history
Correct answer: An approximate geographic location associated with an internet connection
IP address geolocation provides an approximate geographic location (typically city or regional level) associated with an internet connection, useful for narrowing investigative leads.
NCIC NCIC Cybersecurity & Digital Intelligence 2
What is 'social network analysis' (SNA) used for in criminal intelligence?