Chapter 12

Which of the following organizations put forth a code of ethics designed primarily for InfoSec professionals who have earned their certifications? The code includes the canon: Provide diligent and competent service to principals.

(ISC)2

Which document must be changed when evidence changes hands or is stored?

chain of custody

Which ethical standard is based on the notion that life in community yields a positive outcome for the individual, requiring each individual to contribute to that community?

common good

The first component of the analysis phase is ___________, which allows the investigator to quickly and easily search for a specific type of file.

indexing

There are three general categories of unethical behavior that organizations and society should seek to eliminate. Which of the following is NOT one of them?

malice

In InfoSec, most operations focus on __________, which are those documents that provide managerial guidance for ongoing implementation and operations.

policies

Which type of law regulates the relationships among individuals and among individuals and organizations?

private

Which type of document grants formal permission for an investigation to occur?

search warrant

___________________ is a subset of civil law that allows individuals to seek redress in the event of personal, physical, or financial injury.

tort law

Which of the following is an international effort to reduce the impact of copyright, trademark, and privacy infringement, especially via the removal of technological copyright protection measures?

DMCA

Which of the following is the study of the rightness or wrongness of intentions and motives as opposed to the rightness or wrongness of the consequences and is also known as duty- or obligation-based ethics?

Deontological ethics

Which of the following ethical frameworks is the study of the choices that have been made by individuals in the past; attempting to answer the question, what do others think is right?

Descriptive ethics

Which Amendment to the U.S. Constitution starts with: The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated?

Fourth

(T/F) Ethics carry the sanction of a governing authority.

False

(T/F) The current law regarding nationwide search warrants for e-mail requires the government to use a search warrant to compel a provider to disclose unopened e-mail that is more than six months old.

False

(T/F) Using standard digital forensics methodology, the first step is to analyze the EM data without risking modification or unauthorized access.

False

Which act requires organizations that retain health care information to use InfoSec mechanisms to protect this information, as well as policies and procedures to maintain them?

HIPAA

Which law addresses privacy and security concerns associated with the electronic transmission of PHI?

Health Information Technology for Economic and Clinical Health Act

In digital forensics, all investigations follow the same basic methodology. Which of the following should be performed first in a digital forensics investigation?

Identify relevant items of evidentiary value (EM)

Which law requires mandatory periodic training in computer security awareness and accepted computer security practice for all employees who are involved with the management, use, or operation of each federal computer system?

The Computer Security Act

Which act is a collection of statutes that regulates the interception of wire, electronic, and oral communications?

The Electronic Communications Privacy Act of 1986

(T/F) An item does not become evidence until it is formally admitted to evidence by a judge or other ruling official.

True

(T/F) The Secret Service is charged with the detection and arrest of any person committing a U.S. federal offense relating to computer fraud, as well as false identification crimes.

True

Which law extends protection to intellectual property, which includes words published in electronic formats?

U.S. Copyright Law

Ethics,are based on ___________________, which are the relatively fixed moral attitudes or customs of a societal group.

cultural mores

Which of the following is the best method for preventing an illegal or unethical activity? Examples include laws, policies and technical controls.

deterrence

Any court can impose its authority over an individual or organization if it can establish which of the following?

jurisdiction

An organization increases its _____________ if it refuses to take measures—due care—to make sure that every employee knows what is acceptable and what is not, and the consequences of illegal or unethical actions

liability

Which of the following is compensation for a wrong committed by an employee acting with or without authorization?

restitution

The penalties for offenses related to the National Information Infrastructure Protection Act of 1996 depend on whether the offense is judged to have been committed for one of the following reasons except which of the following?

For political advantage

Which two approaches are available to an organization when employing digital forensics?

Protect and forget; Apprehend and prosecute

Which of the following allows investigators to determine what happened by examining the results of an event—criminal, natural, intentional, or accidental?

forensics