The person who offers his formal opinion as a testimony about a computer crime incident in the court of law is known as:

1. A. Expert Witness
2. B. Incident Analyzer
3. C. Incident Responder
4. D. Evidence Documenter

Correct Answer: A

The data on the affected system must be backed up so that it can be retrieved if it is damaged during incident response. The system backup can also be used for further investigations of the incident. Identify the stage of the incident response and handling process in which complete backup of the infected system is carried out?

1. A. Containment
2. B. Eradication
3. C. Incident recording
4. D. Incident investigation

Correct Answer: A

Any information of probative value that is either stored or transmitted in a digital form during a computer crime is called:

1. A. Digital evidence
2. B. Computer Emails
3. C. Digital investigation
4. D. Digital Forensic Examiner

Correct Answer: A

The sign of incident that may happen in the future is called:

1. A. A Precursor
2. B. An Indication
3. C. A Proactive
4. D. A Reactive

Correct Answer: A

Insiders may be:

1. A. Ignorant employees
2. B. Carless administrators
3. C. Disgruntled staff members
4. D. All the above

Correct Answer: D