Forensic Science Exam
True
A bloodstain with no DNA-containing cells is an example of class evidence
In this seminar, we will learn about ballistics and tool marks as present in the wound patterns of a body.
A local crime lab is offering training sessions for law enforcement in the area. Which of the following descriptions would most likely be used for the seminar led by the medical examiner?
Medical Examiner
A medically qualified person who investigates deaths under unusual circumstances
Suspect
A person is though to be guilty of committing a crime
True
A rifling impression is left on the surface of a bullet after it has been fired.
Frye Standard
A test to determine admissibility of scientific evidence
Crime Laboratory Scientist
A woman looked at me carefully using a small magnifier she called her She used a small pointer to count my ridges and wrote down many details about my appearance. She placed me beside another card with a print that was taken from a woman. After careful comparison, she placed me carefully back into the bag and back into my drawer.
it is a cyber weapon it is designed to circumvent the digital safety system the attack is generic
According to the cyberforensic expert, what makes this computer worm so dangerous?
False
All medical examiners are trained forensic pathologists.
Drawn to scale
All of the following are components of a rough sketch except
Photographs of the scene
All of the following should be included in the notes taken by the crime scene investigator except
False
Analysts will look most closely at the newest tools, as newer tools (released most recently from a factory and with the least use) increase the potential for individualization.
No names of people should be included in order to protect their privacy
At a crime scene investigation, when the investigator is documenting notes, all of the following rules are correct except..
weapons and markings at a crime scene
Ballistics is the study of
A "to scale" drawing of the scene.
By photographing the crime scene, the investigator is able to provide all of the following to the judge and jury except
Verify each person that has touched the evidence
Chain of custody is a procedure used in crime scene investigations to:
True
Computers can be used to reconstruct events such as traffic accidents.
Pattern Analysis
Conducting ballistics testing and then analyzing your results would be using a technique called
Last
Creating a reconstructive theory is the _______________step in the crime scene reconstruction process.
Daubert Rule
Deals with the admissibility of expert witness testimony in court
Sketch
Drawing of the crime scene to show position of victim, location of evidence, and entrance/exit
Testing
During a crime scene reconstruction an investigator must compare known samples of evidence with unknown samples collected from the crime scene. This process is known as ____________________.
Crime Scene Investigator
During the course of a trial, the defense suggests that the fiber evidence used to match the car used to transport stolen goods (and thus bring charges against the owner of that car) were not collected properly. Who will the prosecutor most likely bring in to testify regarding that defense strategy?
Ballistics
Evidence is logged into the crime lab and it consists of a fired bullet and bullet casings. Which department in the crime lab would be tasked with analyzing this evidence
The evidence was not protected and a lot of people contaminated the crime scene
Explain the problem with the chain of custody in this case.
Testimonial and Circumstantial
Fact: A body was found in an unmarked grave. That grave showed marks of a mattock used as the tool to dig the grave. Charge: Tom Dula and Anne Melton premeditated the murder of Laura Foster and dug the grave in advance of the killing. Evidence: Lotty Foster said that Tom Dula came to her house to borrow a mattock and left with it going towards his mother, Mary Dula's house; she did not get her mattock back for 3 or 4 days after she had asked for it twice. Martha Gilbert testified that she saw Tom Dula on the path between Tom Dula's mother's house and Anne Melton's and he had a mattock and was digging alongside the path. She asked what he was doing and he said skelping (digging or fixing) the path; this was 200-300 yards from the grave that was found. Pauline Foster said that Ann Melton left after dinner on Thursday night and went in the direction of Ridge Road; she did not come back until about an hour before daybreak on Friday. Pauline Foster said that when Ann Melton returned on Friday about an hour before daybreak; her shoes and dress were wet. Washington Anderson said that he went to James Melton's on Thursday; James Melton, Jonathan Gilbert and Pauline Foster were there; Ann Melton was not there. Washington Anderson returned to James Melton's on Friday morning and Ann Melton was there in bed and her shoes were wet. Which of the following best describes the evidence provided by Lotty Foster for this charge?
Testimonial and Circumstantial
Fact: September 1st, 1866 a grave was found. The removed earth had been carried away and sod replaced. There were signs of a mattock (an agricultural tool that is shaped like a pickax) in the hard side of the grave. The grave was not far from the path leading to Lotty Foster's house, but on a secluded ridge covered by thickets. Conclusion/Charge: The remains found in the grave were thought to be Laura Foster, who was last seen on May 25th, 1866. An extensive search had been made for her after her disappearance and the return of the horse she was last seen riding, but her body was never found. Evidence: Dr. George N. Carter testified that he examined the body of the female at the spot where it was found. There was a cut in the clothes that corresponded with the cut in the body on the left breast between the third and fourth ribs. The grave was 2.5 feet deep and very narrow, not long enough for the body so the legs were drawn up. Due to the decomposition of the body he could not tell if the wound was fatal but if it penetrated the heart it would have been. There was a bundle of clothes in the grave. Betsey Scott (a neighbor) testified that she saw Laura Foster riding a mare coming from and about a mile from Wilson Foster's house with a bundle of clothes in her lap. Which of the following best describes the evidence of Betsey Scott for this charge?
Testimonial and Direct
Facts: Laura Foster was a 21 year old woman, daughter of Wilson Foster, who was last seen on May 25, 1866. Tom Dula was a 21 year old Confederate Veteran, who was known to be courting both Laura Foster and Ann Foster Melton, who were cousins, before the war. By the end of the war, Ann Foster Melton had married her husband. Upon the return of Tom Dula from war, the competition between the cousins for the affection of Tom Dula began again. Charge: Ann Melton planned and helped with the murder of Laura Foster. Evidence: Pauline Foster said that her cousin (Pauline lived with the Melton family) Ann Melton told her that she was going to kill Laura Foster, and threatened Pauline to keep her quiet, and then left the house on May 24. Pauline also said that later in the day she saw Tom Dula coming to the Melton's house from the direction in which Ann Melton had gone earlier that day. Which description below best describes the evidence provided by Pauline Foster for this charge?
Physical and Circumstantial
Facts: Tom Dula was known to be "courting" (dating with intent to marry) both Laura Foster and Ann Melton. Laura Foster was alive at daybreak on Friday, May 25th (the day of her disappearance). Wilson Foster (Laura's father) discovered a missing mare on the same morning his daughter disappeared. A search was made for Laura Foster but she was not found. Wilson Foster's mare returned home with the remains of a chewed rope three weeks later. Conclusion/Charge: Laura Foster was lured from her house with the pretense that she was meeting Tom Dula to run away and get married. She took her father's mare and went to meet him at a home known as the "Bates place". Evidence: Wilson Foster testified that Laura Foster went outside about an hour before daybreak on Friday but came back in after a few minutes. When he woke up about daybreak she was gone and so was his mare. He tracked his mare to the Bates place where he lost the trail. Betsey Scott (a neighbor) testified that she saw Laura Foster riding a mare coming from and about a mile from Wilson Foster's house with a bundle of clothes in her lap.She asked Laura Foster if Tom Dula had come and Laura Foster said yes, just before daybreak; she asked where Laura Foster was going to meet him and she said the Bates place. Carl Carlton testified that he saw Tom Dula on Friday morning a little after the sun came up (about 6:45 am) on the path from his house towards the Bates place; he came from the direction of Wilson Foster's (the home of Laura Foster). Several others testified to the same. J.M. Winkler said he was part of the general search for Laura Foster. He helped search the Bates place and saw the chewed rope tied around a dogwood. It matched the rope on the mare. Which of the following best describes the evidence found by J.M. Winkler for this charge?
Trace Evidence
Gun shot residue, hair fibers found on a car seat and glass found on the floor board of a car would be examples of_______.
2
How many digital "warheads" are present in this computer worm?
To provide a reference point when including actual placement of evidence
In a rough crime scene sketch, what is the purpose of the two fixed points that you are to choose when completing a sketch?
3RD
In which century did Forensic Science first begin?
They should make sure the container is airtight
Investigators are called to investigate a possible arson. They collect some clothing from this crime scene. How should the investigators package this evidence?
The moved furniture and the blood found in the bathroom and bedroom
List at least two types of evidence that could have been collected from this scene.
The Italian police department did not protect and secure the crime scene
List one mistake made by the Italian Police Department initially at the crime scene.
1. The crime scene should be protected and secured 2. Observe and document the crime scene 3. Photograph the scene 4. Collect the evidence
List the steps that should have been taken in the investigation of this crime scene.
Conjecture
Making a guess when trying to explain how a crime scene was created is called__________________________.
False
Often times it is difficult to tell from which gun a cartridge came as different guns may leave the same striations on a bullet.
The investigators should observe and document the scene
Once the investigators arrive at the crime scene, and they protect and secure the area, what is the next step in the investigation?
Recognition
Reconstruction of a crime scene involves the analysis of lots of evidence. It is the job of the forensic investigator to determine what is really evidence and what was collected but is not important to the crime. The term used in scene reconstructions to describe this process is called_____________________.
Medical Examiner
Salary: $ 142, 290 - $ 248, 082 annually Duties: Provides administrative and pathology assistance Morgue administration, supervising the activity of the professional and technical staff in autopsy-related activities Performs approximately 250 medicolegal autopsies per year Twenty or more times a year, testifies in state and federal courts regarding autopsy findings Reviews 1400-1450 non-central office cases annually for completeness and accuracy and consults with local medical examiners Requirements: Extensive knowledge of the diversified specialized equipment, instruments, and materials required in all phases of pathology. Considerable knowledge of microscopy, toxicology, ballistics, and investigative techniques as they relate to forensic medicine. Thorough knowledge of procedures involved in detection, analyzing, evaluating, and interpreting manifestations and symptoms of physical conditions from pathologic examinations. Licensed to practice medicine in the state of North Carolina, board certified in Anatomic and Forensic Pathology by the American Board of Pathology and two years of experience in forensic medicine; or an equivalent combination of education and experience
Crime Scene Investigator
Salary: $ 27, 509 annually Duties: • Collect, develop, preserve latent fingerprints • Search out, collect, preserve, log evidence • Document all handling of evidence and property • Maintain activity logs and generate reports • Respond to emergency and non-emergency calls for service • Transports evidence to Property Control Office Requirements: Skill in maintaining records, work as a team member, interact with people of different social, economic, and ethnic backgrounds, communicate clearly and concisely both verbally and in writing; must complete forensic science course from American Institute of Applied Science within 14 months of hire; successful completion of background investigation and polygraph required
Forensic Crime Laboratory Scientist
Salary: $ 41, 667 - $ 68, 177 annually Duties: • This is a non-sworn position and may be located in either of 3 laboratory settings: Drug Chemistry Section at the Raleigh Laboratory, Triad Regional Laboratory (Greensboro), or Western Regional Laboratory (Asheville) location. • Performs chemical and instrumental analysis on drug and/or toxicology evidence • Prepares a laboratory report that supports the analytical findings • Provides testimony as an expert witness in court proceedings • Participates in competency and proficiency testing Requirements: Obtain individual certification consistent with international and ISO standards within 18 months of the date the analyst becomes eligible to seek certification according to the standards of the certifying entity, undergo and must successfully complete a comprehensive background investigation. Master's level college degree. Overtime is required in this position
Forensic Crime Scene Investigator
Salary: $ 46, 707 - $ 60, 135 annually Duties: • Collect, processes and safeguards evidence • Provides court testimony • Supervises investigators when officer in charge is absent • Examines physical evidence to determine what method of processing to use Requirements: Must possess a Bachelor of Science degree in a natural or forensic science from an accredited university; graduates of programs accredited by the Forensic Science Educational Program Accreditation Commission are preferred. Knowledge of principles, theories, concepts and practices of analytical chemistry, physical sciences, or biology or related field to the work. Knowledge of the rules of evidence and the methods used in presenting evidence in court; and policies and procedures for maintaining the chain-of-evidence integrity. Knowledge of safety practices and procedures that apply to field analysis, particularly in the forensic laboratories; and knowledge, skill and ability to maintain research methods and techniques, keep informed of current literature and/precedence relevant to the forensic scientific fields.
Forensic Crime Laboratory Scientist
Salary: $ 66, 7880 - $ 96, 824 annually Duties: • Analyzing blood samples for the presence of alcohol • Writing detailed reports • Conduct the interpretation, evaluation, and quality review of analytical results and reports • Will assist in the training of blood alcohol examiners, maintain instrumentation, validate new methods, and establish and write policies and procedures. Requirements: Experience as a Technical Leader of a Blood alcohol unit, have worked in an accredited Forensic Laboratory, experience validating instruments and methods, experience as a Technical Assessor for a Laboratory Accreditation Body, experience in training blood alcohol analysis, knowledge of Toxicology blood drug analysis, strong communication skills, strong writing skills
Individulazation
Saying that every piece of evidence is unique is using the forensic process of _____________________.
The IP address repeat, suggesting the same non public computer was used for multiple votes
Scene 1: It is a big day at California State University - San Marcos. Today is Election Day for Student Government offices. College elections are conducted online, with each student using his/her online college account. The account requires the student to log in and have the password. The stakes are high - not only do the votes determine who has the honor of leading, but the positions come with a salary. The campus president receives a stipend of $8,000 and vice-presidents receive $7,000. They also control a $300,000 dollar annual budget. During the voting process, university officials monitor the online votes and look for any irregularities. Here is an excerpt from the log. This excerpt identifies votes that occurred within a 5 minute timeline, from 9:00am to 9:05am. The user ID is a 3 letter combination that is unique for each student. The IP address identifies the specific computer from which the vote was cast. All public computers on campus begin with the code 67. Examine the log and then answer the question that follows. Please note, once you select your choice and move forward, you will not be able to return to this question.
Matthew Weaver used the key loggers to steal student usernames and passwords and used those to log in as other students and vote for himself.
Scene 2: During the voting process, university officials noticed that more than 150 votes were cast from the same IP address (the one you saw in the previous question). Right before the voting ended, on March 15th, officials noticed that 259 votes were coming from another IP address, this one a public computer. Officials tracked the IP address to a classroom, and found Matthew Weaver, a junior at the college and a business major, sitting at the computer in question. Matthew Weaver also happened to be one of the two students running for the office of Class President. Weaver claimed he was working on a school project. The university police officer arrested Weaver and seized his bag. Upon searching his bag, the police officer discovered 15 small devices called key loggers. A key logger is a device that can be inserted into a computer to record a person's keystrokes, usually without their knowledge. Local police were notified and Weaver was taken into custody. The key loggers were analyzed and contained data from 19 different university computers, with information from over 700 different computer sessions. Based on the facts now available, what is the most likely scenario investigators will work with as they plan how to proceed with the digital investigation?
Weaver both researched and ordered key loggers and likely set up the fake chat that implicated other students
Scene 3: Four days after his arrest, on March 19th, local journalists received a screenshot from a chat room. In the screenshot, it shows several students (Brian Wales, Derek Yates, Marcus Lin) seemingly discussing how they deliberately smeared Weaver's reputation by setting up the election rigging. Weaver asks police to drop the investigation. The police reviewed video evidence from a campus surveillance video in the computer lab where Weaver was arrested. The video shows Weaver intercepted an email from a student, Sheridan C., to the university administrator. Sheridan complained to the administrator that she was unable to vote. Weaver is seen pulling up a spreadsheet on his computer, and then entering Sheridan's username and password to access her email. He then wrote a second email to the administrator, posing as Sheridan, and writing that she was now able to vote and to disregard the first email. Then, he deleted the entire conversation from Sheridan's inbox. This video footage gave police all they needed to obtain a warrant for Weaver's computer. The FBI was then called in to the investigation to provide digital forensic support. The first step by the FBI was to review Weaver's browser history. Below is an excerpt from his browser history log that shows several relevant entries (irrelevant entries are not shown.)
1. a spreadsheet in which he had recorded the usernames and passwords of 740 students 2. yes, because when you delete a file all you are in fact doing is removing the index entry in the book for that page or chapter, the page or chapter still stays there. When your computer writes more data to the disk it may, or may not, overwrite the previously 'deleted' file. If it is overwritten, then the file is gone, if not the file still remains on the hard disk. 3. No because weaver is a suspect and the files on his computer are hard evidence that he committed the crime.
Scene 4: Special Agents from the FBI also extracted data from the hard drive of Weaver's computer. Despite the fact that Weaver had deleted multiple files, the investigators were able to recover two files of great interest: First, a PowerPoint presentation dated to January which he gave to fellow members of his fraternity, Tau Kappa Epsilon. He proposed that he run as president and his fraternity brothers run as vice presidents and other officials—with each titleholder receiving an annual stipend of $1,000 to $8,000. If they won, Weaver and his brothers would control the student-government budget. Second, a spreadsheet (the one visible in the video footage) in which he had recorded the usernames and passwords of 740 students. (Students have to use the username and password to access the college computer systems and internet). How did detectives recover deleted files? Think of a file system as a book with an index. When you delete a file all you are in fact doing is removing the index entry in the book for that page or chapter, the page or chapter still stays there. When your computer writes more data to the disk it may, or may not, overwrite the previously 'deleted' file. If it is overwritten, then the file is gone, if not the file still remains on the hard disk. Just turning your computer on, or browsing the Internet will cause new information to write to your hard drive. This means that the more time passes from the time the file was deleted, and the more the computer is used after the file was deleted, the higher the chances of the file being overwritten. As the lead digital forensic scientist on this case, you are called into the trial to provide expert testimony. Summarize what your testimony would likely include. Make sure to answer the following questions: What evidence suggests that Matthew Weaver deliberately stole the identity of over 700 students in order to rig the election? Is this evidence reliable, even if it is extracted from deleted files? How do you know? The Fourth Amendment question that typically comes up in digital evidence cases asks whether an individual has a reasonable expectation of privacy having electronic information stored on electronic devices under that individual's control. Did you ever feel, as a digital forensic expert, that you were violating Matthew Weaver's right to privacy?
Fortunately, the CSIs uncover that she was the one responsible for the murders and arrive in time to subdue and arrest Ellie. After learning that CSI Morgan and Ellie Brass have both been taken captive by their still unknown murder suspect, the CSIs race to piece the clues together and solve the case before it's too late.
Season 14: Episode 1 - The Devil and D.B. Russell. After learning that CSI Morgan and Ellie Brass have both been taken captive by their still unknown murder suspect, the CSIs race to piece the clues together and solve the case before it's too late. The killer, using engravings from Dante's Divine Comedy as inspiration, leaves two more bodies for the team to find, then kills their chief suspect in a fiery explosion. With only two of the Nine Circles left, the CSIs know that Morgan and Ellie will be the killer's next victims. Russell makes a break in the case when he solves an anagram that was engraved under a victim's skin, leading them to Jake and Matthew Chapman. As the CSIs race for the Chapman hideout, Morgan and Ellie manage to escape, killing Matthew in the process. However, Ellie surprises Morgan and shoots her, then lies to the cops while Morgan is unconscious in surgery. Later, Ellie kills her mother Nancy, then turns the gun on her father, Brass. Fortunately, the CSIs uncover that she was the one responsible for the murders and arrive in time to subdue and arrest Ellie.
Conveyance
Something that serves as a means of transportation
False
Striations are the diameter of a bullet.
False
The caliber of a bullet can be determined by measuring the length of the bullet.
To preserve life and property and to prevent contamination
The duty of the first officer on the scene is:
Greater than
The likelihood of finding class physical evidence is _____ the likelihood of finding physical evidence with individual characteristics.
Yi Yu Ji
The name for a collection of criminal cases of the first forensic science case where a woman claimed her husband died in a fire
Medical Examiner
The other print was made during the processing of the dead body.
Individualization
The process of linking physical evidence to a common source
True
The skeleton will be examined for a single point impression or striations indicative of movement across a surface by a tool.
False
The suspect tools will be fitted into any tool marks present on the skeleton to see if it is a match.
Of the Forum
The term "forensics" is derived from the Latin term "forensus" which means:
The chain of custody
The written record of all of the individuals who have had any contact with the evidence is called
Chain of Custody
The written record of individuals who had control over an item of evidence
Crime Scene Investigator
Then, someone applied powder where I lay and brushed some of the powder away. He brushed a little too hard, though, and damaged a small part of me. A light flashed from a camera Then, tape was laid down on top of me and the powder. Next thing I knew, I felt myself being lifted from the surface! I was laid down on an index card and put in a bag.
Data Collection
There are five steps in crime scene reconstruction. The first step is _____________________.
Physical and Direct
This murder occurred LONG before DNA testing could be used to determine if the remains were (or were not) Laura Foster. DNA tests can compare samples from remains (such as teeth) to a sample known to be from the individual to determine if the two match. No two individual have exactly the same DNA. If DNA evidence could have been used in this way in this case, what type of evidence would that provide as to the identify of the remains?
Specific Physical Evidence Reconstruction
Using techniques such as pattern analysis when looking at blood splatter would be a part of __________________________.
Latent Evidence
What department in the crime lab would analyze this fingerprint evidence?
Protect and secure the crime scene
What is the appropriate first step in a crime scene investigation?
To prevent Iran from achieving a nuclear bomb
What is the idea behind the Stuxnet computer worm?
Medical Degree
What level of education is required of a medical examiner?
Medical degree
What level of education is required of a medical examiner?
Comparison
When a paint chip found on a hit-and-run victim's garment is examined side-by-side with paint removed from a vehicle suspected of being involved in the incident, this is an example of what?
Protect and secure the crime scene
When the crime scene investigators arrive at the crime scene, the first step is to
Contamination
When trace evidence is added to a crime scene after the crime has taken place
Toxicologist
Which field of forensics would involve detecting drugs and poison at a crime scene?
Botanist
Which field of forensics would involve using pollen grains to determine place/time of year of a crime scene?
Entomologist
Which field of forensics would use insects to determine time of death?
Forensic Anthropology
Which of the following branches of Forensic Science would identify sex, age, and height from human remains?
Forensic Odontologist
Which of the following branches of Forensic Science would involve a dentist?
Ballistics
Which of the following branches of Forensic Science would use characteristics of guns to determine weapons used at a crime scene?
Irregular edges of a broken knife
Which of the following evidences is an example of individual characteristics?
Random striations on bullets
Which of the following evidences is an example of individual characteristics?
Arrest suspects
Which of the following is not a role of the crime scene investigator?
arrest suspects
Which of the following is not a role of the crime scene investigator?
Each piece of evidence must be packaged in a separate container with a detailed label.
Which of the following is true about the collection of evidence at a crime scene
Direct
Which of the two, direct or circumstantial, is means of proof showing the existence of a fact in question without the intervention of the proof of any other fact?
Circumstantial
Which or the two, circumstantial or direct, is an indirect type of evidence?
Pathologist
Which profession in the field in forensics would be most likely to perform an autopsy?
Outdoor
Which type of a crime scene is more susceptible to environmental loss and damage?
In order to have something to compare potential evidence found at the crime scene to
Why is it important to collect controls at the crime scene?
It is important to establish the chain of custody to show that the evidence has not been contaminated.
Why is it important to make sure to include signatures of all people that have had contact with a piece of evidence as well as the reason for the contact?
To diagram the pattern of blood To diagram location of evidence To diagram location of victims
Why is it important to sketch out the crime scene?
working on specific event reconstruction.
You are trying to figure out when a person arrived on the scene and when they left the scene. Analyzing this part of the reconstruction means that you are
Specific Incident Reconstruction
_______________________ is a re-enactment of the entire event that is under investigation. Connections are made between the sequence of events and the evidence.
Outdoor crime scenes
more susceptible to environmental loss and damaging effects on biological evidence
