OIC OIC Technology & Digital Investigations

Question 1

When seizing a mobile device during an OIC investigation, what is the primary concern regarding digital evidence integrity?

Accepted Answer

Preventing remote wipe by isolating the device from wireless networks

Answer

Ensuring the device battery is fully charged before seizure

Answer

Backing up data to personal cloud storage for safekeeping

Answer

Keeping the screen unlocked to preserve active sessions

Question 2

Which tool is used to create a forensic image of a hard drive while preventing any data modification?

Accepted Answer

Write blocker combined with imaging software

Answer

Standard file copy utility such as Windows Explorer

Answer

Cloud sync application to mirror drive contents

Answer

Antivirus scan with deep archive extraction

Question 3

In digital investigations, a hash value such as MD5 or SHA-256 is used to:

Accepted Answer

Verify that a digital file has not been altered since it was collected

Answer

Encrypt sensitive files stored on evidence servers

Answer

Identify the geographic location of a device

Answer

Compress large evidence files for easier storage

Question 4

An OIC inspector reviewing surveillance footage should first establish:

Accepted Answer

Chain of custody from original recording system to review copy

Answer

The brand of the recording equipment used

Answer

Whether the footage has been compressed for storage

Answer

The identity of all individuals visible in the footage

Question 5

Metadata in digital files can provide investigators with which type of information?

Accepted Answer

Creation date, modification date, author, and device information

Answer

The file's encryption key and access permissions

Answer

The identity of all users who viewed the file

Answer

The geographic coordinates where the file was stored

Question 6

When documenting digital evidence in an OIC case, the inspector should record:

Accepted Answer

The device make, model, serial number, condition, and how it was found

Answer

Only the data extracted from the device after forensic imaging

Answer

The name of the forensic analyst who performed the extraction

Answer

The estimated monetary value of the device