OIC OIC Technology & Digital Investigations 2

Question 1

Which legal authority is typically required before an OIC inspector can access private electronic records stored on a third-party server?

Accepted Answer

A valid subpoena or court order directed to the service provider

Answer

Accessing private electronic records held by third-party providers requires a subpoena or court order under the Electronic Communications Privacy Act.

Question 2

Social media data collected during an OIC investigation should be preserved using:

Accepted Answer

Screenshots with timestamps and URL documentation, or a certified capture tool

Answer

Social media evidence must be captured with verifiable timestamps and source URLs, ideally using certified tools, to establish authenticity.

Question 3

When an investigation involves encrypted files that cannot be accessed, an OIC inspector should:

Accepted Answer

Document the encrypted files and consult a digital forensics specialist or legal counsel for decryption options

Answer

Encrypted files must be documented, and legal options including compelling decryption or using forensic tools should be explored with specialists.

Question 4

IP address logs obtained during a digital investigation are best used to:

Accepted Answer

Identify the origin of network activity and associate it with a location or account

Answer

IP logs identify network activity origins and can be corroborated with other evidence, but alone they do not conclusively identify an individual.

Question 5

In the context of OIC digital investigations, 'chain of custody' for electronic evidence means:

Accepted Answer

A documented record of every person who accessed or handled the evidence from seizure to court

Answer

Chain of custody is the documented history of who handled evidence, ensuring it has not been tampered with between collection and presentation.

(OIC) Oregon Inspector Certification Practice Test

(OIC) Oregon Inspector Certification Practice Test

OIC OIC Technology & Digital Investigations 2