ALL SETS COMBINED Forensics Part 1

An example of a service that uses peer-to-peer (P2P) file-sharing protocol is:

All of the answers

iTunes

Napster

Spotify

Napster

The data copying process is referred to as:

Imaging

Copying

Verifying

Doubling

Imaging

A cloud-system storage system is:

All of the answers

Apple iCloud

Dropbox

Microsoft OneDrive

All of the answers

What is not an Internet of Things device?

Microwave

Home Assisted Systems

None of these answers are IOTs

Lamps with Voice Commands

Microwave

When computers and the internet are used to commit crimes, this is called:

Cybercrime

Computer Forensics

Randomware

Computer Crime

Cybercrime

One of the most common types of cybercrime is identity theft.

True

False

True

A chain of custody form does not need to be created for the physical item that data is stored on, such as a cell phone.

True

False

False

Extortion via computers is typically carried out using ransomware.

True

False

True

When a perpetrator breaks into a secure computer or network, this is considered:

Hacking

Identity Theft

Malware

Phishing

Hacking

Digital Evidence includes:

Video

Digital Images

Audio Recordings

All of the answers

All of the answers

Malware can be installed on a computer via:

Phishing

Worms

All of the answers

Viruses

All of the answers

A unique feature of digital evidence is that it can be copied.

True

False

True

Deleting a file erases it forever.

False

True

False

The technique is when more than one tower detects a cellular network signal and the location of a source can be located:

Triangulation

Pinpoint

Network

GPS

Triangulation

The FBI task force dedicated to finding and prosecuting sexual exploitation and child pornography crimes against children is:

VCAC

VICAP

NAMUS

CJIS

VCAC

questioned document

Any object that contains handwriting or typescript and whose source or authenticity is in doubt is referred to as a(n) _________.

Variations in mechanical, physical, and mental functions make it (likely,unlikely) that the writing of two different individuals can be distinguished.

likely

In a problem involving the authorship of handwriting, all characteristics of both the ________ and _________ documents must be considered and compared.

known, questioned

True or False: A single handwriting characteristic can by itself be taken as a basis for a positive comparison.

False

True or False: Normally, known writings needs not contain words and combinations of letters present in the questions document.

False

Less

As the age difference between genuine and unknown specimens becomes greater, the standard tends to become __________ representative of the unknown.

Gilbert v. California

In the Supreme Court case of __________ the Court upheld the taking of handwriting exemplars before the appointment of counsel and determined handwriting to be non testimonial evidence not protected by Fifth Amendment privileges.

Conscious

When requested writing is being given by a suspect, care must be taken to minimize a(n) __________ writing effort.

Individual

Random wear and damage to a type writer impart it with _________ characteristics.

Ultraviolet, Infrared

Examination of a document under ________ or ________ lighting may reveal chemical erasures of words or numbers.

Some inks, when exposed to blue-green light, absorb the __________ radiation and emit light.

infrared

Handwriting containing inks of different chemical compositions may be distinguished by photography with __________ film.

Infrared-Sensitive

Indented

_________ writings are partially visible impressions that appear on a sheet of paper that, at the time of writing, was underneath the one on which the visible writing was done.

Thin-Layer

Many ink dyes can be separated by the technique of ____________ chromatography.

The most common features associated with a paper examination are general appearance, color, weight, and watermarks.

true or false

true

The two general categories of printers are impact and nonimpact printers.

true or false

true

Questioned documents include:

a) Petitions and lottery tickets.

b) Contracts and passports.

c) Letters and checks.

d) All of the above

d) all of the above

In the case of ________, the Supreme Court held handwriting to be nontestimonial evidence not protected by Fifth Amendment privileges.

a) Carmichael v. Kumho Tire Co.

b) United States v. Mara

c) United States Secret Service v. Mara

d) Gilbert v. California

d) gilbert v. california

In dealing with fax machines, photocopiers, and computer printers, which class characteristics might be examined?

a) Type of paper

b) Chemical composition of toner

c) Type of toner-to-paper fusing method

d) All of the above

d) all of the above

________ writings are partially visible impressions appearing on a sheet of paper underneath the one on which the visible writing was done.

a) Charred

b) Indented

c) Obliterated

d) Questioned

b) indented

Overwriting or crossing out writing is known as:

a) Erasure.

b) Obliteration.

c) Indentation.

d) Alteration.

b) obliteration

No two specimens of writing prepared by one person are ever identical in every detail.

true or false

True

Variations in vertical and horizontal alignment cannot be used to identify a typewriter.

True or false

false

An adequate number of exemplars is critical for determining the outcome of a comparison.

true or false

true

If an investigator is to prepare standards from a suspect typewriter, which procedure is recommended?

a) Each character should be typed without the ribbon.

b) Prepare at least one copy of the text in full word-for-word order.

c) Examine the type impressions left on the ribbon.

d) Partial copies of the suspect text are to be typed in light, medium, and heavy touches.

b) prepare at least one copy of of the text in full word-for-word order

With regard to the constitutionality of obtaining handwriting exemplars, the courts have ruled all of the following EXCEPT:

a) Fifth Amendment privileges apply.

b) It is not in violation of Fourth Amendment rights.

c) Such action does not constitute unreasonable search and seizure of a person.

d) None of the above

a) fifth amendment privileges apply

When comparing sample writing to a suspect document, the age difference between the documents should be no more than:

a) Six to twelve months.

b) Two to three years.

c) Five to seven years.

d) Twelve to eighteen months.

b) two to three years

When a suspect computer printer is not available, the examiner may need to analyze the document's ________ to identify the make and model of the machine.

a) Class characteristics

b) Individual characteristics

c) Handwriting

d) TTI

a) class characteristics

The possibility of recognizing known writing habits in samples produced when a writer is under the influence of drugs or alcohol is ________ the possibility of recognizing known writing habits produced when the writer of a sample is not under the influence of drugs or alcohol.

a) The same as

b) Greater than

c) Less than

d) None of the above

c) less than

A databank of ink dye patterns has been established by the U.S. Treasury Department using:

a) HPLC

b) TLC

c) TTI

d) NAA

b) TLC

Document examiners frequently uncover the original writing of words that have been crossed out with the aid of:

a) Transmitted radiation.

b) Side lighting.

c) Color photography.

d) Infrared radiation.

d) infrared radiation

Inks on handwritten documents may be compared for their chemical composition by the technique of:

a) Infrared spectrophotometry.

b) Thin-layer chromatography.

c) Ultraviolet spectrophotometry.

d) None of the above

b) thin-layer chromatography

A TTI cannot be used to distinguish between a real and a fraudulently prepared fax document.

true or false

false

Examination of toner typically involves microscopic analysis followed by identification of the inorganic and organic components.

true or false

true

Which of the following statements is FALSE?

a) Any object that contains handwritten or typewritten markings whose source or authenticity is in doubt is a questioned document.

b) In the case of Gilbert v. California the court held that the taking of handwriting exemplars was not prohibited by the Fifth Amendment.

c) An inconclusive finding by a document examiner may be due to an insufficient number of known writings available for comparison.

d) Once adulthood is reached, an individual's handwriting generally will not change with age.

d) once adulthood is reached, an individual's handwriting generally will not change with age

When dictating to a person in order to obtain samples of handwriting, one should NOT:

a) Dictate the contents of the text at least three times.

b) Allow the suspect to view the questioned document before dictating it.

c) Use paper similar to that of the questioned document.

d) Use a pen similar to that of the questioned document.

b) allow the suspect to view the questioned document before dictating it

Which are important characteristics of a printer, photocopier, or fax machine?

a) Type of paper

b) Type of toner or ink used

c) Printing technology

d) All of the above

d) all of the above

The writing characteristics of a person may be altered by whether:

a) The posture or stance of the author varies between writings.

b) The paper is ruled or unruled.

c) Pencil, ballpoint, or fountain pen is used.

d) All of the above

d) all of the above

Which is an example of an impact printer?

a) Ink-jet

b) Dot-matrix

c) Laser

d) All of the above

b) dot-matrix

charred document

any document that has become darkened and brittle through exposure to fire or excessive heat

erasure

the removal of writing, typewriting, or printing from a document; it is normally accomplished by either chemical means or an abrasive instrument

exemplar

an authentic sample used for comparison purposes, such as handwriting

indented writings

impressions left on papers positioned under a piece of paper that has been written on

infrared luminescence

a property exhibited by some dyes that emit infrared light when exposed to blue-green light

natural variations

normal deviations found between repeated specimens of an individual's handwriting or any printing device

obliteration

the blotting out or smearing over of writing or printing to make the original unreadable

questioned document

any document about which some issue has been raised or that is the subject of an investigation

Fax machines print a header known as the​ ________ at the top of each fax​ page, which may become a very important point of comparison.

TTI

Trace Evidence

Can be anything; remember Locard's Exchange Principle.

Primary Transfer

Soil from a gravesite embedded in shoe tread of the killer.

Secondary Transfer

Dog hair transferred from a couch or car seat to someone's clothing.

Microanalysis

The application of a microscope and microscopical techniques to observe, collect, and analyze micro-evidence.

Microanalysis Samples

Milligram (mg) and Microgram (μg) samples.

Comparative Analysis

Linking people, places, and things through detailed analysis and the exchange principal.

Basic Microscopy

Employs a stereo binocular microscope for preliminary evaluation of submissions.

Total Magnification

Determined by the power of the objective (OBJ) multiplied by the power of the eyepiece (EP).

Compound Binocular Microscope

Used in schools and medical laboratories; magnifies an image from 25-1200 times.

Forensic Laboratories Magnification

Generally utilize 40-400x.

Micrometry

Quantification of characteristics such as length, width, and thickness.

Polarizing Light Microscopy (PLM)

Uses two polarizing elements positioned in the optical path of the microscope.

Wavelength and Frequency Relationship

Shorter wavelength = higher energy.

Michel-Levy Chart

Used for analyzing refraction index (RI) and birefringence (ΔRI).

Comparison Microscopy

Links two microscopes by an optical bridge allowing observation of two independent images.

Microspectrophotometry (MSP)

Combines microscopes with spectroscopic instruments for accurate measurement of color.

Raman Spectroscopy

Light from a source is scattered by the electron cloud, with shifts related to vibrational energy levels.

Scanning Electron Microscopy (SEM)

Provides greater magnification and resolution, up to 10-100,000 times.

Energy Dispersive X-ray Spectrometer (EDS)

Generates spectra revealing the elemental composition of the object.

Glass Characteristics

Evaluated macroscopically; reveals impact type and side of glass.

Glass Refractive Index Measurement (GRIM)

Utilizes immersion methods when RI of sample matches the liquid.

Fibers

Common class of microscopic transfer evidence, grouped as animal, vegetable, or mineral.

Paint Collection

Requires at least one complete sample from an area near contact.

Soils

Complex mixtures with physical characteristics such as color, pH, and particle size.

Gunshot Residue (GSR)

Mixture of organic & inorganic materials deposited on hands, hair, face, or clothing.

Which microscope is generally employed first in the examination of trace evidence?

Stereo Compound Microscope

Comparison

Stereo Binocular Microscope

Compound Binocular Microscope

Stereo Binocular Microscope

A fiber from your vehicle that is transferred to someone's sweatshirt is considered a:

Secondary Transfer

Trace Transfer

Primary Transfer

Direct Transfer

Secondary Transfer

With inclusionary evidence, it is possible to say that samples absolutely came from the same source.

True

False

False

How is total magnification computed?

Objective lens multiplied by the eyepiece

None of these answers

Objective 1 multiplied by Objective 2

Objective lens multiplied by the first lens

Objective lens multiplied by the eyepiece

What is the single direction in which light vibrating is absorbed referred to?

Polymer Direction

Privileged Direction

Plane Direction

Privileged Direction

What is the condition in which no light emerges when two polarizers are placed so that the privileged directions are perpendicular?

Intersecting Polars

Plane Directional polar

Crossed Polars

Perpendicular Polars

Crossed Polars

If a microscopist measures birefringence and retardation what third property can be determined using the Michel-Levy chart?

Thickness

Color

Privileged direction

Polarization

Thickness

What SEm is combined with EDS what is the smallest size particle that can readily be resolved?

1 micrometer

1 nanometer

10 micrometers

1 decameter

1 micrometer

The most common use of a SEM/EDS is an examination of clothing fibers.

True

False

False

What is the most significant property glass?

Refraction Index

Fracture Lines

Thickness

Color

Refraction Index

A crack that originates from the impact point.

Radial

Conchodial

Concentric

Radial

GRIM is an automated method for determining the match point of a glass chip.

True

False

True