Cyber Forensics Chapter 15

For forensics examiner, keeping the ____ updated and complete is crucial to supporting your role as an expert and showing that you're constantly enhancing your skills through training, teaching, and experience.

CV

The _____________ of evidence supports the integrity of your evidence.

Chain of custody

The practice of opposing attorneys trying to prevent you from testifying by claiming you have discussed the case with them.

Conflicting out

A formal examination in which you are questioned under oath with only the opposing parties, your attorney, and a court reporter present.

Deposition

The purpose of the _____________ is for the opposing attorney to preview your testimony before trial.

Deposition

You provide ____ testimony when you answer questions from the attorney who hired you.

Direct

The ____ is the most important part of testimony at a trial.

Direct examination

There are two types of depositions: ____ and testimony preservation.

Discovery

This type of testimony reports opinions based on experience and facts gathered during an investigation.

Expert Witness

A consulting expert must testify in court.

False

During opening statements, both attorneys provide an overview of the case, with the plaintiff's attorney going last.

False

Rebuttal allows the judge to decide whether certain evidence should be admitted when the jury is not present.

False

When you are learning about the case, you must do all of the following, EXCEPT _____________.

Form lots of opinions

Validate your tools and verify your evidence with ____ to ensure its integrity.

Hashing algorithms

Allows the judge to decide whether certain evidence should be admitted when the jury isn't present.

Motion in limine

____ is a written list of objections to certain testimony or exhibits.

Motion in limine

Leading questions such as "Isn't it true that forensics experts always destroy their handwritten notes?" are referred to as ____ questions.

Setup

A technical/scientific witness present the case's evidence that meets the relevance standard and explain what it is and how it was obtained.

True

Whether you're serving as an expert witness or a fact witness, be professional and polite when presenting yourself to any attorney or the court.

True

You have to go through a qualification phase of your testimony where your attorney asks questions to elicit the qualifications that make you an expert witness.

True

When you discover negative findings about the case, you need to inform _________ as soon as possible.

Your attorney