You Are Working in a Computer Forensic Lab

question 71

Multiple Choice

You are working in a computer forensic lab. A law enforcement investigator brings you a computer and a valid search warrant. You have legal authority to search the computer. The investigator hands you a piece of paper that has three printed checks on it. All three checks have the same check and account number. You image the suspect's computer and open the evidence file with EnCase. You perform a text search for the account number and check number. Nothing returns on the search results. You perform a text search for all other information found on the printed checks and there is still nothing returned in the search results. You run a signature analysis and check the gallery. You cannot locate any graphical copies of the printed checks in the gallery. At this point, is it safe to say that the checks are not located on the suspect computer? 

• A) No.  The images could be located a compressed file.
• B) No.  The images could be in unallocated clusters.
• C) No.  The images could be embedded in a document.
• D) All of the above.
• E) No.  The images could be in an image format not viewable inside EnCase.

---

Definitions:

Sexual Harassment

Unwelcome actions, requests for sexual favors, or other verbal or physical conduct of a sexual nature that affects an individual's employment or work environment.

Peremptory Challenge

In a jury trial, the right of the plaintiff and the defendant in jury selection to reject, without stating a reason, a certain number of potential jurors who appear to have an unfavorable bias.

Challenge for Cause

The legal right in jury selection for the defense or prosecution to request the removal of a juror based on specified reasons that suggest partiality or incompetence.

Jury Selection

The process of choosing jurors who will serve on a trial jury from a pool of candidates.