Guide to Computer Forensics and Investigations, 5th Edition, xxxxxxx
Ch. 2 Solutions-1
Chapter 2 Solutions
Review Questions
1. An employer can be held liable for e-mail harassment. True or False?
2. Building a business case can involve which of the following?
3. The ASCLD mandates the procedures established for a digital forensics lab. True or
False?
4. The manager of a digital forensics lab is responsible for which of the following?
(Choose all that apply.)
a. Making necessary changes in lab procedures and software
5. To determine the types of operating systems needed in your lab, list two sources of
information you could use.
your company
6. What items should your business plan include?
7. List two popular certification systems for digital forensics.
8. Why is physical security so critical for digital forensics labs?
9. If a visitor to your digital forensics lab is a personal friend, it’s not necessary to have
him or her sign the visitor’s log. True or False?
10. What three items should you research before enlisting in a certification program?
11. Large digital forensics labs should have at least ______ exits.
12. Typically, a(n) ____________ lab has a separate storage area or room for evidence.
13. Digital forensics facilities always have windows. True or False?
Guide to Computer Forensics and Investigations, 5th Edition, xxxxxxx
Ch. 2 Solutions-2
14. Evidence storage containers should have several master keys. True or False?
15. A forensic workstation should always have a direct broadband connection to the
Internet. True or False?
16. Which organization provides good information on safe storage containers?
17. Which organization has guidelines on how to operate a digital forensics lab?
18. What name refers to labs constructed to shield EMR emissions?
Hands-On Projects
Hands-On Project 2-1
The main purpose of this project is for students to realize they must be consistent in how they
handle cases. They need to state what the company does or what industry they’re in. Some
companies might be affected by the Sarbanes-Oxley Act and others by HIPAA requirements,
but they’re all affected by what stands up in court proceedings or disciplinary hearings. The
U.S. DOJ has a publication on how to set things up that addresses questions such as the
following: Can personal smartphones synched to the company network be searched? Who
handles the evidence, and how is it collected, stored, and examined? How is an investigation
started? Students can do a search on the term “digital evidence + procedures,” for example, to
find a lot of information.
Hands-On Project 2-2
Students’ answers may vary, but they need to be skeptical about investigators touting a
certification. Not all are qualified, so they should ask questions such as what experience they
have, whether they’re recognized in their field, and so on.
Hands-On Project 2-3
Hands-On Project 2-4
Students’ answers may vary, but their reports should include as much information as possible
on all hardware and software used in the lab. Reports should also list all available system
Guide to Computer Forensics and Investigations, 5th Edition, xxxxxxx
Ch. 2 Solutions-3
Hands-On Project 2-5
Students should begin by talking to the group that previously handled investigations to find
Case Projects
Case Project 2-1
Students should create a spreadsheet with the following details:
For hardware:
▪ Computer model
For software, the following are possible answers:
▪ Windows OS
Case Project 2-2
Students’ answers may vary, but their reports should include public release information from
Case Project 2-3