Cissp-Domain 10-Legal, Regulations,investigations & Compliance

Front 1

Where does the greatest risk of cybercrime come from?

Back 1

Insiders

Front 2

What are the five rules of evidence

Back 2

AAACC
1) Be authentic
2) Be accurate
3) Be admissible
4) Be complete
5) Be convincing

Front 3

Computer forensics is really the marriage of computer science, information technology and engineering with:?

Back 3

Law

Front 4

What principle allows us to identify aspects of the person responsible for a crime , when whenever committing a a crime, the perpetrator takes something and leaves something behind?

Back 4

Locard's principle of exchange

Front 5

what is the biggest hinder to dealing with computer crime?

Back 5

Activity associated with computer crime is truly international

Front 6

What are the phases of incident response

Back 6

1) Triage /Documentation
2) Investigation
3) Containment
4) Analysis & Tracking

Front 7

____ emphasizes the abstract concepts of law and is influenced by the writings of legal scholars and academics?

Back 7

Civil Law

Front 8

Which type of intellectual property covers the express of ideas rather than the ideas themselves?

Back 8

Copyright

Front 9

Which type of intellectual property protects the goodwill a merchant or vendor invests in its products

Back 9

Trademark

Front 10

Name the major legal systems

Back 10

1) Common Law
2) Civil or code law
3) Customary Law
4) Religious law
5) Mixed Law

Front 11

Common law consists of what three branches

Back 11

1) Criminal law
2) Tort law
3) administrative/regulatory law

Front 12

what organization oversees international patents and trademarks

Back 12

World Intellectual Property Organization (WIPO)

Front 13

Name three of the computer forensics models:

Back 13

1) IOCE / International Orgnanization of Computer Evidence
2) SWGDE / Scientific Working Group on Digital Evidence
3) ACPO / Association of Chief Police Officers

Front 14

What are the 4 categories of software licensing?

Back 14

1) Freeware
2) Shareware
3) Commercial
4) Academic

Front 15

What are the rights and obligations of individuals and organizations with respect to the collection, use, retention and disclosure of personal information related to?

Back 15

privacy

Front 16

Triage compasses:

Back 16

1) detection
2) identification
3) notification

Front 17

Integrity of a forensic bit stream images of ten determined by:

Back 17

comparing hash totals to the original source

Front 18

When dealing with digital evidence, the crime scene:

Back 18

Must have the least amount of contamination

Front 19

A cashier who enters incorrect values in the cash register and keeps the remaining money has committed what kind of crime

Back 19

Data Diddling

Front 20

Why do different legal systems create a challenge in dealing with computer crime?

Back 20

different interpretations of law,
different evidence requirments, lack of cooperations

Front 21

List the intellectual property laws

Back 21

Patents, copyright, trademark, trade secrets

Front 22

European Union Privacy principles

Back 22

-Collecting data fairly and lawfully
-keeping data reasonable amt of time
-ensuring its accuracy and security
-consent to disclose to third parties
-Person have right to make changes to their personal data

Front 23

concept that corporate officers and others with fiduciary responsibilities meet requirement to protect the company's assets

Back 23

due care

Front 24

involves implementing controls, ongoing risk assessment and documentation

Back 24

due diligence

Front 25

Computer forensics is primarily concerned with

Back 25

Discovering evidenc

Front 26

which of the following is true?
a) change evidence is inadmissible, but when returned to its orginal form might be allowed by the judge
b) documenting change to evidenc protect its admissibility
c) uncontrol modified evidence is always inadmiissible
d) a chain of custody will preserved its admissibility

Back 26

C) uncontrolled evidence is always inadmissible

Front 27

Hearsay is

Back 27

statement that cannot be cross examined

Front 28

Intellectual property law is primarily designed to:

Back 28

protect intangible assets only

Front 29

a __ afford the highest level of protection for intellectual property

Back 29

Patent

Front 30

Nike "swoosh" is a

Back 30

trademark

Front 31

Privacy can be defined as:

Back 31

Rights and obligations of individuals and organizations with respect to the collection, use, retention and disclosure of personal information

Front 32

Negligence can be defined as:

Back 32

I) Acting without due care in a way that causes damages
II) Transfer of value without prior negotiation
III) The shortfall between due diligence and best practice

Front 33

A incident can be defined as:

Back 33

any event that has the potential to negatively impact the business or its assets

Front 34

Categorization of an incident is used to determine

Back 34

Potential risk of the incident

Front 35

Computer forensics falls under

Back 35

Digital Forensic Science

Front 36

First step in a computer forensics investigation

Back 36

Identification

Front 37

Three main elements of incident response

Back 37

1) detection
2) triage
3) response

Front 38

types of evidence

Back 38

direct, real, physical, documentary, demonstrative

Front 39

purpose of chain of custody

Back 39

Assure the court that nothing was changed and that nothing could have been changed

Front 40

Hash totals are used to establish the __ of evidence

Back 40

accuracy and integrity

Front 41

a principle tenant of computer forensic investigative process is

Back 41

do not exceed one's own abilities

Front 42

log analysis is part of what type of analysis

Back 42

Network analysis

Front 43

Primary goal of incident response

Back 43

Mitigate damages caused by malicious activity

Front 44

Primary goal of computer forensics

Back 44

Obtain evidence of malicious activity

Front 45

Extranet, VPNs and shared nets and external entities created what legal concern

Back 45

downstream liability

Front 46

in the absence of computer specific law, what laws are used to prosecute the computer criminals

Back 46

Embezzlement, fraud and wiretapping

Front 47

The Small Business Administration (SBA) and the Business Software Alliance (BSA) were formed to protect what type of organization

Back 47

Software vendors

Front 48

when are computer files admissible in court

Back 48

if produced in the course of regular business hours

Front 49

Legally and ethically making a system attractive to a potential attacker and logging the attacker's actions for use in future prosecution is called

Back 49

Enticement

Front 50

what is considered supporting evidence?

Back 50

corroborative evidence

Front 51

Civil cases hat to do with determining

Back 51

liability

Front 52

Ticking an intruder into accessing confidential info in order to prosecute him is an example of what

Back 52

Entrapment

Front 53

Administrative law deals with

Back 53

violation of regulatory standards

Front 54

avoide conflict of intereste is in ISC2 code of ethics

Back 54

true

Front 55

which form of law has stricter burden of proof and possible imprisonment

Back 55

Criminal law

Front 56

Most laws are drawn from

Back 56

ethics

Front 57

What type of law punished the individual with financial restitution instead of jail?

Back 57

Tort

Front 58

A witness testimony would be classified as what type of evidence

Back 58

secondary/direct/testimony

Front 59

a s/w program would be protected from illegal distrbution under what law?

Back 59

Copyright

Front 60

Which group states that the internet is a privilege and should be treated and used with respect

Back 60

Internet Architecture Board

Front 61

Which of the following prcess is concerne with not only identifying the root cause but also addressing the underlying issue?

Back 61

problem management