- (Topic 1)
According to US federal rules, to present a testimony in a court of law, an expert witness needs to furnish certain information to prove his eligibility. Jason, a qualified computer forensic expert who has started practicing two years back, was denied an expert testimony in a computer crime case by the US Court of Appeals for the Fourth Circuit in Richmond, Virginia. Considering the US federal rules, what could be the most appropriate reason for the court to reject Jason's eligibility as an expert witness?

1. A. Jason was unable to furnish documents showing four years of previous experience in the field
2. B. Being a computer forensic expert, Jason is not eligible to present testimony in a computer crime case
3. C. Jason was unable to furnish documents to prove that he is a computer forensic expert
4. D. Jason was not aware of legal issues involved with computer crimes

Correct Answer: A

- (Topic 1)
What is a SCSI (Small Computer System Interface)?

1. A. A set of ANSI standard electronic interfaces that allow personal computers to communicate with peripheral hardware such as disk drives, tape drive
2. B. CD-ROM drives, printers, and scanners
3. C. A standard electronic interface used between a computer motherboard's data paths or bus and the computer's disk storage devices
4. D. A "plug-and-play" interface, which allows a device to be added without an adapter card and without rebooting the computer
5. E. A point-to-point serial bi-directional interface for transmitting data between computer devices at data rates of up to 4 Gbps

Correct Answer: A

- (Topic 3)
Before you are called to testify as an expert, what must an attorney do first?

1. A. engage in damage control
2. B. prove that the tools you used to conduct your examination are perfect
3. C. read your curriculum vitae to the jury
4. D. qualify you as an expert witness

Correct Answer: D

- (Topic 2)
What is one method of bypassing a system BIOS password?

1. A. Removing the processor
2. B. Removing the CMOS battery
3. C. Remove all the system memoryRemove all the system? memory
4. D. Login to Windows and disable the BIOS password

Correct Answer: B

- (Topic 3)
You are a computer forensics investigator working with local police department and you are called to assist in an investigation of threatening emails. The complainant has printed out 27 email messages from the suspect and gives the printouts to you. You inform her that you will need to examine her computer because you need access to the ____ in order to track the emails back to the suspect.

1. A. Routing Table
2. B. Firewall log
3. C. Configuration files
4. D. Email Header

Correct Answer: D