Deciding how to destroy evidentiary materials that is no longer ...

[lb_gilbert]

When transporting a hard disk that was extracted from a computer, what is the appropriate method of protecting the device during transport?

◦ Faraday bag
◦ Anti-static bag
◦ Sealed and properly labeled box
◦ Unless there is a vital reason for doing so, the hard disk should not be removed from the computer on site.

[ririgirl15]

Anti-static bag

[Capo]

While investigating a person suspected of having child pornography on his machine, you discover that at the time the files first appeared on the system, another user was logged onto the system. This is a powerful piece of ________ evidence.

[ecox1012]

exculpatory

[shofmannx20]

Case notes that you take during initial response are protected from discovery because they are covered under the "work product" doctrine.

◦ true
◦ false

[ms_sulzle]

false

[Evvie72]

By transporting a cellular telephone in a Faraday bag, the device is protected from hackers getting onto the device and wiping it.

◦ true
◦ false

[Pswine]

true

[laurencescou]

Computer scientists break the movement of information from raw electrical voltage changes to humanly readable information as a series of 
 abstraction layers. Which of the following is one of these abstraction layers?

◦ Voltage fluctuations
◦ Changes in magnetic energy on the surface of a hard disk
◦ Character sets
◦ Binary streams
◦ All of these

[ambernicolefink]

All of these