13. Louie is studying for his CISSP exam and comes to you with a question: What is the correct order of the items that make up the evidence life cycle? How will you answer him?
A. Collection, storage, analysis, presentation, and return to victim
B. Seizure, storage, analysis, presentation, and return to victim
C. Seizure, storage, validation, presentation, and return to victim
D. Collection, analysis, storage, presentation, and return to victim
14. Answer: A. Locard's exchange principle states that whenever two objects come into contact, a transfer of material will occur. The resulting trace evidence can be used to associate objects, individuals, or locations to a crime (see http://suite101.com/article/lockards-exchange-principle-a47558). Simply stated, no matter how hard someone tries to cover his or her tracks, some trace evidence always remains. The complexity of modern computers makes it almost impossible for suspects to erase all evidence of their activities. Although suspects can make recovery harder by deleting files and caches, some trace evidence always remains. During an investigation, slack space, cache, the registry, browser history, and the page files are just a few of the items that can be examined. 16. You are placed in charge of your company's new incident response team. Place the five steps of incident response in their proper order.
A. Identify, analyze, mitigate, investigate, and train
B. Train, identify, analyze, mitigate, and investigate
C. Identify, coordinate, mitigate, investigate, and educate
D. Educate, identify, coordinate, mitigate, and investigate
24. Chain of custody includes which of the following?
A. Who, what, where, when, and how
B. Who, when, why, how, motive, and where
C. What, why, and how
D. What, when, and where
35. Answer: B. A copyright is a protective measure that covers any published or unpublished literature, artistic work, or scientific work. This allows the creator of a work to enjoy protection of that work for a period of time. Usually, this includes the stipulation that the owner of the copyright is the only person who can legally profit from the work, unless the owner gives express permission that a third party can use the work during that period. For example, the creator of a piece of software owns the copyright. Often, the creator can profit from this software by selling licenses to others as a means to allow them to legally use the software too. Essentially, this means that if you can see it, hear it, and/or touch it, it may be protected.