Since disks and other magnetic media are only copies of the actual or original evidence, what type of
evidence are they are often considered to represent?

Which of the following is LEAST necessary when creating evidence tags detailing the chain of custody
for electronic evidence?

To be admissible in court, computer evidence must be which of the following?

Computer-generated evidence is considered:

Why would a memory dump be admissible as evidence in court?

Evidence corroboration is achieved by

You are documenting a possible computer attack. Which one of the following methods is NOT
appropriate for legal record keeping?

Which one of the following is NOT a requirement before a search warrant can be issued?

Once a decision is made to further investigate a computer crime incident, which one of the following
is NOT employed?

From a legal perspective, which of the following rules must be addressed when investigating a
computer crime?