PILB Digital Forensics and Cyber Investigations

Question 1

A Nevada PI is asked to recover deleted files from a client's computer as part of a civil case. The PI should:

Accepted Answer

Use a forensic imaging tool to create a bit-for-bit copy before any analysis

Answer

Creating a forensic image preserves the original evidence and maintains chain of custody required for legal proceedings.

Question 2

Which federal law prohibits unauthorized access to computer systems, making it relevant to cyber investigations conducted by Nevada PIs?

Accepted Answer

Computer Fraud and Abuse Act (CFAA)

Answer

The CFAA criminalizes unauthorized access to computer systems and is the primary federal statute governing computer intrusion.

Question 3

A PI is monitoring a suspect's social media activity for a client. To legally collect evidence from a public social media profile, the PI should:

Accepted Answer

Screenshot and archive publicly visible posts with timestamps using OSINT tools

Answer

Publicly visible social media content can be legally collected through open-source intelligence techniques without deception or unauthorized access.

Question 4

Chain of custody in digital evidence handling means:

Accepted Answer

Documenting every person who accessed or handled the evidence from collection to court presentation

Answer

Chain of custody ensures the integrity and admissibility of digital evidence by tracking all access and handling from collection through presentation.

Question 5

When a Nevada PI collects metadata from a digital photograph as evidence, the metadata can reveal:

Accepted Answer

Date, time, GPS coordinates, and device information embedded in the file

Answer

EXIF metadata embedded in digital photos can include date/time stamps, GPS location data, and the specific device used to take the photo.

PILB - Private Investigators Licensing Board Practice Test

PILB - Private Investigators Licensing Board Practice Test

PILB Digital Forensics and Cyber Investigations