Guide to Computer Forensics and Investigations, 5e
Ch. 15 Solutions-1
Chapter 15 Solutions
Review Questions
1. Which of the following describes fact testimony?
2. Which of the following describes expert witness testimony? (Choose all that apply.)
3. When using graphics while testifying, which of the following guidelines applies?
(Choose all that apply.)
a. Make sure the jury can see your graphics.
4. What kind of information do fact witnesses provide during testimony? (Choose all that
apply.)
5. What expressions are acceptable to use in testimony to respond to a question for which
you have no answer? (Choose all that apply.)
6. What should you do if you realize you have made a mistake or misstatement during a
deposition? (Choose all that apply.)
8. At trial as a fact or expert witness, what must you always remember about your
testimony?
9. Before testifying, you should do which of the following? (Choose all that apply.)
10. Voir dire is the process of qualifying a witness as an expert. True or False?
Guide to Computer Forensics and Investigations, 5e
Ch. 15 Solutions-2
11. What is a motion in limine?
12. During your cross-examination, you should do which of the following? (Choose all that
13. Your curriculum vitae is which of the following? (Choose all that apply.)
14. The most reliable way to ensure that jurors recall testimony is to do which of the
following?
15. If you’re giving an answer that you think your attorney should follow up on, what should
you do?
16. In answering a question about the size of a hard drive, which of the following responses
is appropriate? (Choose all that apply.)
b. The technical data sheet indicates it’s a 3 terabyte hard drive.
17. List three items you should include in your CV.
18. When working for a prosecutor, what should you do if the evidence you found appears to
be exculpatory and isn’t being released to the defense?
Hands-On Projects
Hands-On Project 15-1
This project is a continuation of the in-chapter activity. Students should find three text files that
Hands-On Project 15-2
Guide to Computer Forensics and Investigations, 5e
Ch. 15 Solutions-3
Using information found in Hands-On Project 15-1, students should find two identical source code
Hands-On Project 15-3
Based on information collected from the in-chapter activity and Hands-On Projects 15-1 and 15-2,
Hands-On Project 15-4
Students should examine the forensic image of Denise Robinson’s computer, InCh05.img, for
Case Projects
Case Project 15-1
Students’ outlines should be a general overview of the tasks to perform. They should list the tools
Case Project 15-2
Students should use the elements described in this chapter to construct their curriculum vitae and
Case Project 15-3
For this project, students should use definitions from sources such as Webopedia and other
Case Project 15-4
Students should use the outline from Case Project 15-1 to create a PowerPoint, a LibreOffice