5.  Other than the two basic types of computer crimes above, what non-computer crimes might a computer forensics examiner get involved with, and how?

6.  What is the purpose of a standard operating procedure (SOP) in digital forensics? You might also think of this as a systematic approach to the investigation. List five activities that should be in every SOP for digital forensics.

7.  What is the primary difference between government run and corporate run high-tech investigations?

8. If you are hired to conduct a digital forensics investigation by either side in a criminal or civil action, to what do you owe your allegiance?

9.  What software or hardware tool must be used in digital media acquisition to protect against inadvertent tainting of evidence by the operating system.

10.  Name the three most popular formats for bit-stream images of digital media.


11. What is the difference between making a standard copy of a piece of media and making a forensically sound bit-stream backup copy?
12. Name three different tools that can be used to create bit-stream backup images and identify their strengths.
13.How does a collision occur in the context of authenticating images of computer media?
14. Discuss physical security of digital forensics labs, including why physical security is necessary and important.
15.  Compare and contrast the physical vs. logical architecture of a hard disk.