Digital Forensics and Cyber Investigations Flashcards
6 cards from real PILB practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Digital Forensics and Cyber Investigations flashcards as text
Open Source Intelligence (OSINT) in a cyber investigation refers to:
Answer: Collecting information from publicly accessible sources such as social media, websites, and public records
OSINT involves gathering information from legally accessible public sources, making it a foundational and lawful investigative technique.
A Nevada PI is asked to intercept text messages on a subject's phone. Under the Electronic Communications Privacy Act (ECPA), this is:
Answer: Illegal without consent from at least one party to the communication or a court order
The ECPA prohibits intercepting electronic communications without consent or a lawful court order, regardless of the requester's identity.
Which Nevada law governs recording of private conversations and sets a one-party consent standard?
Answer: NRS 200.620 — Nevada is a one-party consent state for recording private conversations
Under NRS 200.620, Nevada allows recording of a private conversation with the consent of at least one party, meaning a PI who is party to the call may record it.
A PI discovers during a cyber investigation that a subject is operating a phishing scheme targeting Nevada residents. The PI should:
Answer: Document findings, inform the client, and recommend reporting to law enforcement or the Nevada AG
A PI's role is to document and report findings to the client who can then engage proper authorities; taking unilateral action would be both legally and ethically improper.
When preserving a webpage as digital evidence, the most forensically sound method is:
Answer: Using a web archiving tool that captures the full HTML, metadata, and timestamp
Forensic web archiving tools capture the full page content along with URL, timestamp, and technical metadata required for evidentiary purposes.
A PI conducting a background investigation finds a subject's prior criminal conviction record. Under the FCRA, this information may be reported to a client for employment screening for how long after the conviction?
Answer: There is no time limit on reporting criminal convictions under the FCRA
Unlike some other adverse information, the FCRA's 7-year limit does not apply to criminal convictions, which may be reported indefinitely.