Review Questions

1. What is electronic discovery?

2. Name some examples of electronic discovery items.

3. The recovery of data focuses on what four factors?

4. Who works under more restrictive rules, law enforcement officials or corporate employees ?

5. What is incident response?

6. What is the difference between a virus and a worm?

7. Why aren't incidents in many corporate environments reported ?

8. What law was passed to avoid future accounting scandals such as those involving Enron and WorldCom?

9. Name some factors that will determine which criminal cases get priority.

10. Name a good resource for computer forensics training for law enforcement.