Chapter 2 Test
Which of the following ethical frameworks is the study of the choices that have been made by individuals in the past? a.Normative ethicsb.Deontological ethicsc.Applied ethicsd.Descriptive ethics
. Descriptive ethics
Which law addresses privacy and security concerns associated with the electronic transmission of PHI? a.Health Information Technology for Economic and Clinical Health Actb.National Information Infrastructure Protection Act of 1996c.American Recovery and Reinvestment Actd.USA PATRIOT Act of 2001
Health Information Technology for Economic and Clinical Health Act
In digital forensics, all investigations follow the same basic methodology once permission to search and seize is received, beginning with _________. a.investigating allegations of digital malfeasanceb.acquiring (seizing) the evidence without alteration or damagec.identifying relevant items of evidentiary valued.analyzing the data without risking modification or unauthorized access
Identifying relevant items of evidentiary value.
Which law requires mandatory periodic training in computer security awareness and accepted computer security practice for all employees who are involved with the management, use, or operation of a federal computer system? a.The Computer Security Actb.National Information Infrastructure Protection Actc.Computer Fraud and Abuse Actd.The Telecommunications Deregulation and Competition Act
The Computer Security Act
Which act is a collection of statutes that regulates the interception of wire, electronic, and oral communications? a.National Information Infrastructure Protection Act of 1996b.The Electronic Communications Privacy Act of 1986c.Federal Privacy Act of 1974d.The Telecommunications Deregulation and Competition Act of 1996
The Electronic Communications Privacy Act of 1986
Which of the following is the study of the rightness or wrongness of intentions and motives as opposed to the rightness or wrongness of the consequences (also known as duty- or obligation-based ethics)? a.Deontological ethicsb.Applied ethicsc.Meta-ethicsd.Normative ethics
a.Deontological ethics
Investigations involving the preservation, identification, extraction, documentation, and interpretation of computer media for evidentiary and root cause analysis are known as _________. a.digital forensics b.crime scene investigationc.criminal investigationd.e-discovery
a.digital forensics
There are three general categories of unethical behavior that organizations and society should seek to eliminate. Which of the following is NOT one of them? a.maliceb.accidentc.ignoranced.intent
a.malice
Permission to search for evidentiary material at a specified location and/or to seize items to return to the investigator's lab for examination is known as a(n) _________. a.search warrant b.affidavitc.forensic clued.subpoena
a.search warrant
Digital forensics can be used for two key purposes: ________ or _________. a.to investigate allegations of digital malfeasance; to perform root cause analysisb.e-discovery; to perform root cause analysisc.to solicit testimony; to perform root cause analysisd.to investigate allegations of digital malfeasance; to solicit testimony
a.to investigate allegations of digital malfeasance; to perform root cause analysis
Which of the following organizations put forth a code of ethics designed primarily for InfoSec professionals who have earned their certifications? The code includes the canon: Provide diligent and competent service to principals. a.SANSb.(ISC)2c.ACMd.ISACA
b.(ISC)2
Which act requires organizations that retain health care information to use InfoSec mechanisms to protect this information, as well as policies and procedures to maintain them? a.ECPAb.HIPAAc.Sarbanes-Oxleyd.Gramm-Leach-Bliley
b.HIPAA
Sworn testimony that certain facts are in the possession of the investigating officer and that they warrant the examination of specific items located at a specific place is known as a(n) _________. a.forensic findingb.affidavitc.search warrant d.subpoena
b.affidavit
The penalties for offenses related to the National Information Infrastructure Protection Act of 1996 depend on whether the offense is judged to have been committed for several reasons. Which of the following is NOT one of those reasons? a.In furtherance of a criminal actb.For purposes of commercial advantagec.For political advantaged.For private financial gain
c.For political advantage
Which law extends protection to intellectual property, which includes words published in electronic formats? a.Security and Freedom through Encryption Actb.Freedom of Information Actc.U.S. Copyright Lawd.Sarbanes-Oxley Act
c.U.S. Copyright Law
The most complex part of an investigation is usually __________. a.preventing the destruction of potential EMb.protecting potential EMc.analysis for potential EMd.requesting potential EM
c.analysis for potential EM
Which ethical standard is based on the notion that life in community yields a positive outcome for the individual, requiring each individual to contribute to that community? a.virtueb.fairness or justicec.utilitariand.common good
common good
Which of the following is the result of a U.S. led international effort to reduce the impact of copyright, trademark, and privacy infringement, especially via the removal of technological copyright protection measures? a.U.S. Copyright Lawb.PCI DSSc.European Council Cybercrime Conventiond.DMCA
d.DMCA
Which of the following is NOT a requirement for laws and policies to deter illegal or unethical activity? a.fear of penaltyb.probability of being penalizedc.probability of being caughtd.fear of humiliation
d.fear of humiliation
The coherent application of methodical investigatory techniques to collect, preserve, and present evidence of crimes in a court or court-like setting is known as _________. a.crime scene investigationb.data imagingc.evidentiary materiald.forensics
d.forensics
Any court can impose its authority over an individual or organization if it can establish which of the following? a.jurisprudenceb.liabilityc.sovereigntyd.jurisdiction
d.jurisdiction
Which of the following is the best method for preventing an illegal or unethical activity? Examples include laws, policies, and technical controls. a.deterrenceb.rehabilitationc.persecutiond.remediation
deterrence
Which of the following is NOT used to categorize some types of law? a.internationalb.regulatoryc.constitutionald.statutory
international
Which subset of civil law regulates the relationships among individuals and among individuals and organizations? a.criminalb.privatec.publicd.tort
private
Which of the following is compensation for a wrong committed by an individual or organization ? a.due diligenceb.liabilityc.jurisdictiond.restitution
restitution