OIC OIC Technology & Digital Investigations

Question 1

When seizing a mobile device during an OIC investigation, what is the primary concern regarding digital evidence integrity?

Accepted Answer

Preventing remote wipe by isolating the device from wireless networks

Answer

Isolating the device using airplane mode or a Faraday bag prevents remote wiping or data alteration, preserving digital evidence integrity.

Question 2

Which tool is used to create a forensic image of a hard drive while preventing any data modification?

Accepted Answer

Write blocker combined with imaging software

Answer

A write blocker hardware device prevents any writes to the source drive while imaging software creates a bit-for-bit forensic copy.

Question 3

In digital investigations, a hash value such as MD5 or SHA-256 is used to:

Accepted Answer

Verify that a digital file has not been altered since it was collected

Answer

Hash values serve as digital fingerprints — any change to a file produces a different hash, confirming whether evidence has been altered.

Question 4

An OIC inspector reviewing surveillance footage should first establish:

Accepted Answer

Chain of custody from original recording system to review copy

Answer

Chain of custody must be established for surveillance footage to ensure it is admissible and has not been tampered with.

Question 5

Metadata in digital files can provide investigators with which type of information?

Accepted Answer

Creation date, modification date, author, and device information

Answer

File metadata records information such as when a document was created or modified, the author, and the device on which it was created.

(OIC) Oregon Inspector Certification Practice Test