Digital Forensics and Incident Response - Second Edition

Questions

1. When preparing an incident report, it is necessary to take into account the audience that will read it.

A) True B) False

2. Which of these is a data source that can be leveraged in preparing an incident report?

A) Applications B) Network/host devicesC) Forensic toolsD) All of the above

3. Incident responders should never include a root cause analysis as part of the incident report.

A) True B) False

4. What is not part of a forensic report?

A) Tools utilized B) Examiner biography / CVC) OpinionD) Exhibit list