Evidence - Cell Phones

Which electronic device is included in the definition of 'Digital Equipment' as per the policy?

Printers with memory

What is the function of an ESN (Electronic Serial Number) in wireless carrier networks?

Device identification for network access

Where is the International Mobile Equipment Identity (IMEI) number usually located on a phone/device?

Inside the battery compartment

What are MEIDs (Mobile Equipment Identifiers) unique to among mobile phones?

CDMA mobile phones Signup and view all the answers

Which peripheral hardware is included in the definition of 'Computer Equipment' according to the policy?

Cables Signup and view all the answers

What is the purpose of securing seized electronic devices in compliance with the policy?

To prevent unauthorized access Signup and view all the answers

What is the recommended action when encountering cellular phones with suspected evidence that will not be powered off?

Activating 'Airplane Mode' Signup and view all the answers

Why is it important to photograph the location and power status of a seized cellular phone?

To create a visual record Signup and view all the answers

What unique numbers are used to identify devices like cell phones?

MEID, IMEI, or ESN Signup and view all the answers

What should be done if an Apple iPhone is powered on and the security code is unknown?

Manually place it in 'Airplane Mode' Signup and view all the answers

Why is it typically preferable to power off cellular phones before collecting them as evidence?

To prevent data loss Signup and view all the answers

What is the purpose of placing an Apple iPhone in 'Airplane Mode' during collection procedures?

To prevent remote wiping of the device Signup and view all the answers

Why is proper legal standing necessary before internally examining a seized device?

To justify the search legally Signup and view all the answers

What should be done if an iPhone is powered on and the security code is unknown but powering it off is not an option?

Manually place it in 'Airplane Mode' Signup and view all the answers

'Faraday bags' are used for what purpose in relation to cell phones?

'Faraday bags' are used for isolating cell phones from remote wiping. Signup and view all the answers

What may be required to access a locked cell phone in addition to a warrant for the physical device?

All of the above Signup and view all the answers

Which of the following is NOT mentioned as a common source for digital data in the text?

Application data stored on the user's computer Signup and view all the answers

What should an investigating officer state when recording digital evidence from a searched device?

The officer should state the device's physical identification and simply state 'digital evidence' for information retrieved from the items searched Signup and view all the answers

What is required in addition to the completed Request for Digital Forensic Services Form, according to the text?

A copy of the document that provides legal authority for the digital forensic services requested Signup and view all the answers

Which of the following court cases is NOT mentioned in the references section of the text?

Terry v. Ohio Signup and view all the answers

Which of the following CALEA Accreditation standards is NOT relevant to this policy?

42.1.3 Signup and view all the answers

What is the purpose of the check digit in a MEID (Mobile Equipment Identifier)?

To verify the authenticity of the MEID Signup and view all the answers

Under what circumstances can digital equipment be seized without proper legal authority?

Digital equipment cannot be seized without proper legal authority Signup and view all the answers

What type of packaging material should be avoided when collecting digital evidence?

Plastic materials Signup and view all the answers

What should be done if a computer is found powered on during evidence collection?

Disable the power at its source without shutting it down normally Signup and view all the answers

How should laptop computers be handled during evidence collection?

Remove the battery to discontinue power Signup and view all the answers

What additional items should be seized along with the digital equipment during evidence collection?

Books, manuals, software, disks, external drives, USB drives, and memory cards related to the system Signup and view all the answers

What should be done to prevent potential remote data wiping of seized computers?

Isolate the computer from all networks as soon as reasonably possible Signup and view all the answers

What should be done if a computer or digital equipment is found in a damaged state?

Treat the item as if it were a working device and follow proper handling procedures Signup and view all the answers

What should be done to document the physical setup of seized digital equipment?

Take photographs of the overall equipment location and component-to-component relationship Signup and view all the answers

What should be done if passwords or related information are found in the area where digital equipment is seized?

Seize the passwords and related information along with the equipment Signup and view all the answers

Which of the following statements is true regarding the search of digital devices?

A separate 'piggy back' warrant should be obtained for searching a device, distinct from the original seizure warrant. Signup and view all the answers

Which of the following is NOT a valid authority for searching digital equipment, according to the text?

Owner consent Signup and view all the answers

What is required for obtaining call detail records containing cell-site location information from a service provider?

A search warrant supported by probable cause Signup and view all the answers

Which of the following statements is true regarding the examination of digital evidence?

Digital copies of relevant data should be created whenever possible. Signup and view all the answers

Which of the following is NOT a requirement for a valid search warrant for a digital device, according to the text?

The warrant must authorize the search of 'any and all information' on the device. Signup and view all the answers

Under what circumstances can an employer grant consent to search an employee's computer, according to the text?

The computer is owned by the employer. Signup and view all the answers

What form should be used to document written consent for searching a digital media device?

OPD Form 5B Signup and view all the answers

Which of the following is NOT an exigent circumstance that may justify a warrantless search of a digital device, according to the text?

The possibility of data loss on the device Signup and view all the answers

Under what circumstance is the expectation of privacy of an individual absolved, according to the text?

Upon the death of the individual. Signup and view all the answers

What is required for examining digital evidence, according to the text?

The investigator must have received proper training prior to the search. Signup and view all the answers