Digital Forensics and Cyber Investigations Flashcards
6 cards from real PILB practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Digital Forensics and Cyber Investigations flashcards as text
A Nevada PI is asked to recover deleted files from a client's computer as part of a civil case. The PI should:
Answer: Use a forensic imaging tool to create a bit-for-bit copy before any analysis
Creating a forensic image preserves the original evidence and maintains chain of custody required for legal proceedings.
Which federal law prohibits unauthorized access to computer systems, making it relevant to cyber investigations conducted by Nevada PIs?
Answer: Computer Fraud and Abuse Act (CFAA)
The CFAA criminalizes unauthorized access to computer systems and is the primary federal statute governing computer intrusion.
A PI is monitoring a suspect's social media activity for a client. To legally collect evidence from a public social media profile, the PI should:
Answer: Screenshot and archive publicly visible posts with timestamps using OSINT tools
Publicly visible social media content can be legally collected through open-source intelligence techniques without deception or unauthorized access.
Chain of custody in digital evidence handling means:
Answer: Documenting every person who accessed or handled the evidence from collection to court presentation
Chain of custody ensures the integrity and admissibility of digital evidence by tracking all access and handling from collection through presentation.
When a Nevada PI collects metadata from a digital photograph as evidence, the metadata can reveal:
Answer: Date, time, GPS coordinates, and device information embedded in the file
EXIF metadata embedded in digital photos can include date/time stamps, GPS location data, and the specific device used to take the photo.
A client provides a PI with login credentials to access a subject's email account to gather evidence. Accessing the account using these credentials is:
Answer: A federal crime under the CFAA regardless of client authorization
Accessing another person's email account without their direct authorization violates the CFAA; a client cannot grant authorization to access a third party's account.