Question 1

Metadata is a legal term that refers to the actual information being retrieved.

Accepted Answer

Metadata refers to information about data, such as author, date created, file type, etc. It is not the actual information being retrieved.

Question 2

Which of the following is NOT a service model defined by NIST?&#10;A) SaaS&#10;B) PaaS&#10;C) IaaS&#10;D) NaaS

Accepted Answer

NaaS (Network as a Service) is not a service model defined by NIST. The three main service models defined by NIST are Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS).

Question 3

Cloud computing is a model in which computing resources are hosted remotely.

Accepted Answer

Cloud computing involves hosting computing resources on remote servers, making them accessible over the internet.

Question 4

Which of the following is an example of metadata?&#10;A) a paragraph in a printed document&#10;B) words in an electronic document&#10;C) GPS data for a photo&#10;D) DNA extracted from blood

Accepted Answer

Metadata refers to data that provides information about other data. GPS data for a photo is an example of metadata as it provides information about the location where the photo was taken. Options A, B, and D do not provide information about other data but rather are data themselves.

Question 5

Where should you look if you want to find what camera was used to take a photograph?&#10;A) on the back of the photo file&#10;B) in the EXIF header&#10;C) on a hardcopy of the photo&#10;D) in the jpg pixels

Accepted Answer

The EXIF header (metadata) contains information about the camera that was used to take the photograph, including the make and model of the camera, as well as settings such as aperture, shutter speed, and ISO. This information can usually be found by viewing the properties of the photo file or by using an EXIF viewer tool. The back of the photo file or a hardcopy of the photo may contain limited information, while the jpg pixels themselves do not contain this information.

Question 6

Which of the following is NOT true about digital evidence?&#10;A) it can pertain to a civil or criminal complaint&#10;B) it is only found on desktop computers&#10;C) it must be acquired by following specific procedures&#10;D) e-mail is an example

Accepted Answer

Digital evidence can be found on a variety of devices including mobile phones, tablets, and servers. It is not limited to desktop computers.

Question 7

E-discovery is the use of advanced electronic surveillance to catch criminals in the act.

Accepted Answer

E-discovery is the process of using electronic tools to search, collect, process, review, and produce electronically stored information (ESI) for use in legal proceedings or investigations. Its main purpose is to uncover relevant information that can be used as evidence in legal cases, not necessarily to catch criminals in the act.

Question 8

In which computer and networking model are client software, data, and computing resources hosted remotely, so client computers and servers don't need to support as many on-site resources?&#10;A) WAN network&#10;B) Internetwork model&#10;C) Cloud computing&#10;D) Mainframe processing

Accepted Answer

Cloud computing involves hosting client software, data, and computing resources remotely so that client computers and servers don't need to support as many on-site resources.

Question 9

The Sedona Canada principles and the Ontario checklist for preparing a discovery plan are part of Canadian procedural law.

Accepted Answer

The Sedona Canada principles and the Ontario checklist for preparing a discovery plan are guidelines for the management of electronic discovery in Canadian civil litigation cases. They are not codified in statute but are widely recognized and followed by Canadian courts.

Question 10

What must be followed to ensure that evidence has not been tampered with or altered?&#10;A) search warrants&#10;B) chain of custody&#10;C) subpoenas&#10;D) requests for production

Accepted Answer

To ensure that evidence has not been tampered with or altered, a chain of custody must be followed. This means that there is a documented record of all individuals who have handled the evidence, where it was kept, and any changes made to it. Search warrants, subpoenas, and requests for production may be involved in obtaining the evidence, but do not guarantee that it has not been tampered with.

Question 11

Which cloud deployment method is considered the most secure?&#10;A) public&#10;B) hybrid&#10;C) internal&#10;D) private

Accepted Answer

The answer of Which cloud deployment method is considered the...

Question 12

Which of the following is true about digital forensics?&#10;A) device forensics focuses on network intrusion&#10;B) a MAC time tells a digital forensics expert the hardware address of a computer&#10;C) network forensics experts consider e-discovery a part of their job&#10;D) e-discovery can be considered a subset of digital forensics

Accepted Answer

The answer of Which of the following is true about...

Question 13

Which set of rules was established in 1938 for resolving issues or legal matters in civil cases at the federal level?&#10;A) FRCP&#10;B) FRCrP&#10;C) FRErP&#10;D) FRE

Accepted Answer

The answer of Which set of rules was established in...

Question 14

Which of the following is true about E-discovery?&#10;A) it can be thought of as data mining&#10;B) it consists of hard copies of court documents&#10;C) it does not include data found on cellular phones&#10;D) it is valid in civil cases, but not in criminal cases

Accepted Answer

The answer of Which of the following is true about...

Question 15

With which service model do customers select an OS and install their own applications?&#10;A) SaaS&#10;B) PaaS&#10;C) NaaS&#10;D) IaaS

Accepted Answer

The answer of With which service model do customers select...

Question 16

Why might you want to use the AccessData Forensic Toolkit?&#10;A) to view document metadata&#10;B) to examine blood evidence&#10;C) to listen in on cell phone transmissions&#10;D) to capture network data

Accepted Answer

The answer of Why might you want to use the...

Question 17

When examining digital evidence on a device, what is used to prevent data from being copied back to the evidence item inadvertently?&#10;A) write blocker&#10;B) live acquisitions&#10;C) deduplication&#10;D) forensic imaging

Accepted Answer

The answer of When examining digital evidence on a device,...

Question 18

The process of retrieving evidence from the data of an encrypted hard drive would be considered the job of which of the following?&#10;A) network forensics expert&#10;B) e-discovery expert&#10;C) ESI administrator&#10;D) device forensics expert

Accepted Answer

The answer of The process of retrieving evidence from the...

Question 19

Which of the following is NOT a cloud deployment method defined by NIST?&#10;A) internal&#10;B) private&#10;C) hybrid&#10;D) public

Accepted Answer

The answer of Which of the following is NOT a...

Question 20

In general, states' rules regarding ESI can be more lenient than federal rules.

Accepted Answer

The answer of In general, states' rules regarding ESI can...

Question 21

Dropbox is an example of the ___________ cloud service model.

Accepted Answer

The answer of Dropbox is an example of the ___________...

Question 22

Match between columns&#10;                        Premises: the application of traditional forensics procedures to acquiring computer evidence&#10;the application of traditional forensics procedures to acquiring computer evidence&#10;the application of traditional forensics procedures to acquiring computer evidence&#10;the application of traditional forensics procedures to acquiring computer evidence&#10;the application of traditional forensics procedures to acquiring computer evidence&#10;the application of traditional forensics procedures to acquiring computer evidence&#10;the application of traditional forensics procedures to acquiring computer evidence&#10;the application of traditional forensics procedures to acquiring computer evidence&#10;the application of traditional forensics procedures to acquiring computer evidence&#10;the application of traditional forensics procedures to acquiring computer evidence

Accepted Answer

The Answer of digital evidence and OCR and FRCrP and is...

Question 23

In the context of e-discovery, ____________ evidence is called ESI.

Accepted Answer

The answer of In the context of e-discovery, ____________ evidence...

Question 24

Which set of rules applies to all evidence presented in court for both civil and criminal cases?&#10;A) FRCP&#10;B) FRCrP&#10;C) FRErP&#10;D) FRE

Accepted Answer

The answer of Which set of rules applies to all...

Question 25

Match between columns&#10;                        Premises: any information stored electronically or in a digital format&#10;any information stored electronically or in a digital format&#10;any information stored electronically or in a digital format&#10;any information stored electronically or in a digital format&#10;any information stored electronically or in a digital format&#10;any information stored electronically or in a digital format&#10;any information stored electronically or in a digital format&#10;any information stored electronically or in a digital format&#10;any information stored electronically or in a digital format&#10;any information stored electronically or in a digital format

Accepted Answer

The Answer of digital evidence and OCR and FRCrP and is...

Question 26

Match between columns&#10;                        Premises: a file in the originating application's format&#10;a file in the originating application's format&#10;a file in the originating application's format&#10;a file in the originating application's format&#10;a file in the originating application's format&#10;a file in the originating application's format&#10;a file in the originating application's format&#10;a file in the originating application's format&#10;a file in the originating application's format&#10;a file in the originating application's format

Accepted Answer

The Answer of digital evidence and OCR and FRCrP and is...

Question 27

What type of software can be used to index the text contained in scanned pictures of documents?&#10;A) TIFF&#10;B) PDF&#10;C) OCR&#10;D) ESI

Accepted Answer

The answer of What type of software can be used...

Question 28

Match between columns&#10;                        Premises: a method used to gather information about customers or vendors by culling ESI&#10;a method used to gather information about customers or vendors by culling ESI&#10;a method used to gather information about customers or vendors by culling ESI&#10;a method used to gather information about customers or vendors by culling ESI&#10;a method used to gather information about customers or vendors by culling ESI&#10;a method used to gather information about customers or vendors by culling ESI&#10;a method used to gather information about customers or vendors by culling ESI&#10;a method used to gather information about customers or vendors by culling ESI&#10;a method used to gather information about customers or vendors by culling ESI&#10;a method used to gather information about customers or vendors by culling ESI

Accepted Answer

The Answer of digital evidence and OCR and FRCrP and is...

Question 29

Match between columns&#10;                        Premises: metadata that specifies dates and times that a file was modified, accessed, and created&#10;metadata that specifies dates and times that a file was modified, accessed, and created&#10;metadata that specifies dates and times that a file was modified, accessed, and created&#10;metadata that specifies dates and times that a file was modified, accessed, and created&#10;metadata that specifies dates and times that a file was modified, accessed, and created&#10;metadata that specifies dates and times that a file was modified, accessed, and created&#10;metadata that specifies dates and times that a file was modified, accessed, and created&#10;metadata that specifies dates and times that a file was modified, accessed, and created&#10;metadata that specifies dates and times that a file was modified, accessed, and created&#10;metadata that specifies dates and times that a file was modified, accessed, and created

Accepted Answer

The Answer of digital evidence and OCR and FRCrP and is...

Question 30

Match between columns&#10;                        Premises: gathering ESI for use in litigation&#10;gathering ESI for use in litigation&#10;gathering ESI for use in litigation&#10;gathering ESI for use in litigation&#10;gathering ESI for use in litigation&#10;gathering ESI for use in litigation&#10;gathering ESI for use in litigation&#10;gathering ESI for use in litigation&#10;gathering ESI for use in litigation&#10;gathering ESI for use in litigation

Accepted Answer

The Answer of digital evidence and OCR and FRCrP and is...

Question 31

Which of the following was developed as the result of burgeoning e-commerce in the 1990s, focused on civil procedures, and has been a basis for e-discovery worldwide?&#10;A) UN Model Law&#10;B) European Corporate Laws&#10;C) Canadian Rules of Civil Procedure&#10;D) Sedona Canada Principles

Accepted Answer

The answer of Which of the following was developed as...

Question 32

Replacing paper documents with electronic documents in PDF or TIFF format is an example of good ___________ management.

Accepted Answer

The answer of Replacing paper documents with electronic documents in...

Question 33

E-Discovery can be thought of as data _________ to gather information for use in legal proceedings.

Accepted Answer

The answer of E-Discovery can be thought of as data...

Question 34

With a __________ cloud, a person's files are on the same physical machine as another person's or organization's files.

Accepted Answer

The answer of With a __________ cloud, a person's files...

Question 35

Match between columns&#10;                        Premises: the path evidence takes from the time the investigator obtains it until the case goes to court or is dismissed&#10;the path evidence takes from the time the investigator obtains it until the case goes to court or is dismissed&#10;the path evidence takes from the time the investigator obtains it until the case goes to court or is dismissed&#10;the path evidence takes from the time the investigator obtains it until the case goes to court or is dismissed&#10;the path evidence takes from the time the investigator obtains it until the case goes to court or is dismissed&#10;the path evidence takes from the time the investigator obtains it until the case goes to court or is dismissed&#10;the path evidence takes from the time the investigator obtains it until the case goes to court or is dismissed&#10;the path evidence takes from the time the investigator obtains it until the case goes to court or is dismissed&#10;the path evidence takes from the time the investigator obtains it until the case goes to court or is dismissed&#10;the path evidence takes from the time the investigator obtains it until the case goes to court or is dismissed

Accepted Answer

The Answer of digital evidence and OCR and FRCrP and is...

Question 36

Match between columns&#10;                        Premises: rules created by the U.S. Supreme Court to ensure that defendants' constitutionally guaranteed rights are protected in federal court cases&#10;rules created by the U.S. Supreme Court to ensure that defendants' constitutionally guaranteed rights are protected in federal court cases&#10;rules created by the U.S. Supreme Court to ensure that defendants' constitutionally guaranteed rights are protected in federal court cases&#10;rules created by the U.S. Supreme Court to ensure that defendants' constitutionally guaranteed rights are protected in federal court cases&#10;rules created by the U.S. Supreme Court to ensure that defendants' constitutionally guaranteed rights are protected in federal court cases&#10;rules created by the U.S. Supreme Court to ensure that defendants' constitutionally guaranteed rights are protected in federal court cases&#10;rules created by the U.S. Supreme Court to ensure that defendants' constitutionally guaranteed rights are protected in federal court cases&#10;rules created by the U.S. Supreme Court to ensure that defendants' constitutionally guaranteed rights are protected in federal court cases&#10;rules created by the U.S. Supreme Court to ensure that defendants' constitutionally guaranteed rights are protected in federal court cases&#10;rules created by the U.S. Supreme Court to ensure that defendants' constitutionally guaranteed rights are protected in federal court cases

Accepted Answer

The Answer of digital evidence and OCR and FRCrP and is...

Question 37

Which of the following were created by a group of lawyers and other professionals as guidelines for handling electronic documents?&#10;A) Federal Rules of Evidence&#10;B) Sedona Principles&#10;C) Advisory Committee on Civil Rules&#10;D) UN Model Law

Accepted Answer

The answer of Which of the following were created by...

Question 38

Match between columns&#10;                        Premises: a software method of scanning a picture and converting the characters to text&#10;a software method of scanning a picture and converting the characters to text&#10;a software method of scanning a picture and converting the characters to text&#10;a software method of scanning a picture and converting the characters to text&#10;a software method of scanning a picture and converting the characters to text&#10;a software method of scanning a picture and converting the characters to text&#10;a software method of scanning a picture and converting the characters to text&#10;a software method of scanning a picture and converting the characters to text&#10;a software method of scanning a picture and converting the characters to text&#10;a software method of scanning a picture and converting the characters to text

Accepted Answer

The Answer of digital evidence and OCR and FRCrP and is...

Question 39

Which Federal Rule of Evidence is relevant to the admissibility of e-mail messages?&#10;A) Limited Admissibility&#10;B) Relevancy and Its Limits&#10;C) Hearsay&#10;D) Opinions and Expert Testimony

Accepted Answer

The answer of Which Federal Rule of Evidence is relevant...

Question 40

Match between columns&#10;                        Premises: any evidence that's stored or transmitted electronically or in a digital format&#10;any evidence that's stored or transmitted electronically or in a digital format&#10;any evidence that's stored or transmitted electronically or in a digital format&#10;any evidence that's stored or transmitted electronically or in a digital format&#10;any evidence that's stored or transmitted electronically or in a digital format&#10;any evidence that's stored or transmitted electronically or in a digital format&#10;any evidence that's stored or transmitted electronically or in a digital format&#10;any evidence that's stored or transmitted electronically or in a digital format&#10;any evidence that's stored or transmitted electronically or in a digital format&#10;any evidence that's stored or transmitted electronically or in a digital format

Accepted Answer

The Answer of digital evidence and OCR and FRCrP and is...

Question 41

Discuss the difference between data and metadata providing examples.

Accepted Answer

The answer of Discuss the difference between data and metadata...

Question 42

Describe e-discovery in terms of data mining.

Accepted Answer

The answer of Describe e-discovery in terms of data mining....

Question 43

Describe software as a service (SaaS). Provide an example.

Accepted Answer

The answer of Describe software as a service (SaaS). Provide...

Question 44

How has the introduction of digital evidence changed the FRE, if at all?

Accepted Answer

The answer of How has the introduction of digital evidence...

Question 45

What are the two specialties of digital forensics?

Accepted Answer

The answer of What are the two specialties of digital...

Question 46

Describe digital evidence. What are some sources of digital evidence?

Accepted Answer

The answer of Describe digital evidence. What are some sources...

Question 47

How does the volume of information involved in a case affect the e-discovery process? How can the impact be reduced?

Accepted Answer

The answer of How does the volume of information involved...

Question 48

What is a difference between e-discovery and digital forensics?

Accepted Answer

The answer of What is a difference between e-discovery and...

Question 49

How does the cloud affect e-discovery?

Accepted Answer

The answer of How does the cloud affect e-discovery?...

Question 50

What is the importance of chain of custody?

Accepted Answer

The answer of What is the importance of chain of...

Deck 1: Introduction to E-Discovery and Digital Evidence