UNIVERSITY EXAMINATIONS: 2019/2020
EXAMINATION FOR THE BACHELOR OF SCIENCE IN APPLIED
COMPUTING
BAC 2509: COMPUTER FORENSICS
FULL TIME/PART TIME
ORDINARY EXAMINATIONS
DATE: MAY, 2020 TIME: 6 HOURS
INSTRUCTIONS: Answer ALL Questions
SECTION B:
QUESTION TWO [20 MARKS]
Outline the steps in the scientific process of computer forensics. Provide one discrete
example for each step in the process showing how the chain of custody is preserved in an
investigation. Why is proper chain of custody such an important principle in any forensic
investigation?
SECTION C:
QUESTION THREE [20 MARKS]
As you build your team, you should begin to acquire the resources, tools and equipment that
will be needed to conduct a variety of forensic examinations. The forensic team should
practice on a variety of platforms and equipment to ensure they understand the nuances of
their tools.
a) i) Identify Four essential team members that you would need to build a Forensics
unit. (4 Marks)
ii) Describe the role of each member (4 Marks)
b) Name and describe in detail at least 8 important rules to follow as a Digital Forensics
Investigator. (8 Marks)
c) While there are many configurations that one can have for a Digital Forensics Lab,
Space Planning considerations in conceptualizing the overall layout of a forensic
laboratory. Describe the four functional areas that this should cover?
(4 Marks)
