Site MapHelpFeedbackMultiple Choice Quiz
Multiple Choice Quiz
(See related pages)



1

Evidence is said to be ___ when it is legally qualified and reliable.
A)competent
B)exclusionary
C)relevant
D)sufficient
2

Evidence that is convincing and measures up without question is said to be ____.
A)best evidence
B)competent
C)relevant
D)sufficient
3

Tangible objects that prove or disprove a fact constitute ____ evidence.
A)demonstrative
B)Direct
C)documentary
D)real
4

Oral testimony that proves a specific fact constitutes ____ evidence.
A)demonstrative
B)Direct
C)documentary
D)real
5

Which of the following is the least rigorous investigative method?
A)Using a dedicated forensic workstation.
B)Examining the suspect system using its software without verification.
C)Booting a suspect system with a verified floppy, CD, kernel and tools.
D)Verifying software on the suspect system and using that software for investigation.
6

Any evidence obtained from an illegal search or seizure is not admissible as evidence as per the ____ rule.
A)best evidence
B)competent
C)exclusionary
D)hearsay
7

Which of the following activities is a chain of custody step?
A)Image the disk by using a bit-level copy.
B)Record all hash values in the documentation.
C)Remove or image only one component at a time.
D)Remove the hard disk and label it.
8

The Fourth Amendment to the United States Constitution precludes ____.
A)electronic crimes
B)hearsay evidence
C)illegal search and seizure
D)tampering of data
9

The remaining sectors of a previously allocated file that are available for the operating system to use are known as ____ space.
A)allocated
B)free
C)slack
D)unallocated
10

The unused space on a disk drive when a file is smaller than the allocated unit of storage is known as ____ space.
A)allocated
B)free
C)slack
D)unallocated







Security+ and BeyondOnline Learning Center

Home > Chapter 23 > Multiple Choice Quiz