Introduction to Forensic Science

You will need to copy and paste these questions (and all future assignment questions) into a Word document and type in the answers. Use as much space as you need, and please do not put one sentence answers. Make sure you fully answer the question and answer ALL parts of the question or you will not get full points. Once you are finished, you will need to save the document as a WORD DOCUMENT . Please use ch19,20 powerpoints attached PLEASE INCLUDE BOTH THE QUESTION AND THE ANSWER IN YOUR ASSIGNMENT. Please no plagarism, no ai no chat bots

Assignment

Chapter 19: Computer Forensics

Chapter 20: Mobile Device Forensics

  1. What is the forensic examiners main goal when obtaining data from an HDD? Why is this best accomplished by removing the HDD from the system and placing it in a laboratory forensic computer?
  2. What is the difference between visible and latent data? How is latent data viewed?
  3. Define RAM and ROM and explain the difference between the two.
  4. What is the motherboard and why is it central to the functioning of the computer?
  5. What is unallocated space? Name three processes that can cause latent data to be stored in unallocated space.
  6. What is the role of the operating system in a computer? Name three common operating systems.
  7. Why does a forensic examiner take a fingerprint of a drive before and after imaging its contents?
  8. Why should an investigator not unplug a computer that may contain chat or instant message conversations?
  9. What are cookies? What is their basic purpose and how are they used by forensic examiners?
  10. What kind of information can the GPS provide?
  11. Differentiate between physical and logical extraction.
  12. What types of information can the UFED tool extract from the mobile device?
  13. What is geolocation?
  14. Differentiate between an SD card and a SIM card.
  15. What is a cellular system?

WRITE MY PAPER

Comments

Leave a Reply