A software company suspects that employees have set up automatic corporate email forwarding to their personal inboxes against company policy. The company hires forensic investigators to identify the employees violating policy, with the intention of issuing warnings to them. Which type of cybercrime investigation approach is this company taking? - ANSWERAdministrative Which model or legislation applies a holistic approach toward any criminal activity as a criminal operation? - ANSWER-Enterprise Theory of Investigation What does a forensic investigator need to obtain before seizing a computing device in a criminal case? - ANSWER-Court warrant Which activity should be used to check whether an application has ever been installed on a computer? - ANSWER-Log review Which characteristic describes an organization's forensic readiness in the context of cybercrimes? - ANSWER-It includes cost considerations. A cybercrime investigator identifies a Universal Serial Bus (USB) memory stick containing emails as a primary piece of evidence. Who must sign the chain of custody document once the USB stick is in evidence? - ANSWER-Those who obtain access to the device Which type of attack is a denial-of-service technique that sends a large amount of data to overwhelm system resources? - ANSWER-Mail bombing Which computer crime forensics step requires an investigator to duplicate and image the collected digital information? - ANSWER-Acquiring data What is the last step of a criminal investigation that requires the involvement of a computer forensic investigator? - ANSWER-Testifying in court How can a forensic investigator verify an Android mobile device is on, without potentially changing the original evidence or interacting with the operating system? - ANSWERLook for flashing lights