Mixed Deck — All CFC Topics Flashcards

Which type of cyberattack involves sending specially crafted DNS responses to redirect a victim's legitimate domain queries to a malicious IP address?

Answer: DNS cache poisoning (Kaminsky attack)

DNS cache poisoning injects fraudulent DNS records into a resolver's cache so that subsequent queries for a legitimate domain resolve to an attacker-controlled IP address.

The pubic symphysis is used by forensic anthropologists primarily to estimate which biological parameter?

Answer: Age at death

The pubic symphysis undergoes predictable morphological changes throughout adulthood and is one of the most reliable skeletal indicators for estimating adult age at death.

In federal court, the admissibility of expert testimony is primarily governed by:

Answer: Federal Rule of Evidence 702

FRE 702 sets the standards for expert testimony admissibility, incorporating the Daubert criteria.

A document allegedly signed in 1998 contains ink with a dye component first manufactured in 2005. What is the correct forensic conclusion?

Answer: The document is backdated

If an ink component did not exist at the purported document date, the document must have been created after that date, establishing backdating.

Which principle states that every contact between two objects leaves a trace that can be detected?

Answer: Locard's Exchange Principle

Locard's Exchange Principle holds that any physical contact between two surfaces results in a mutual transfer of material.

During crime scene reconstruction, 'event sequencing' is best accomplished by:

Answer: Analyzing physical evidence interactions to determine which events preceded others

Event sequencing uses physical evidence relationships—such as which bloodstains overlay others or which damage patterns predate others—to establish the chronological order of events.

When a CFC professional encounters an unfamiliar challenge in digital forensics & cybercrime, what is the recommended first course of action?

Answer: Research applicable standards, consult with subject matter experts, and document the approach

Professional practice requires a methodical approach to unfamiliar challenges: research the applicable standards, consult experts when needed, and document the reasoning for the chosen approach.

A Certified Forensic Consultant is asked to testify about digital evidence. Which action is MOST important before presenting such evidence in court?

Answer: Verifying hash values to confirm the evidence has not been altered since collection

Hash verification (MD5, SHA-256) confirms digital integrity by showing the evidence's current hash matches the hash recorded at collection, proving it is unaltered.

What is the most effective way to measure success in courtroom presentation & testimony within CFC professional practice?

Answer: Use a combination of quantitative metrics, qualitative assessments, and stakeholder feedback aligned with defined objectives

Effective measurement combines multiple data sources — quantitative metrics, qualitative assessments, and stakeholder feedback — all aligned with clearly defined objectives for a comprehensive evaluation.

Which standard governs when a forensic consultant may ethically discuss a concluded case publicly, such as in academic publications or speaking engagements?

Answer: Discussion requires removing or anonymizing all identifying information and ensuring no confidentiality agreement prohibits it

Post-case public discussion is ethically permissible only when identifying details are protected and no confidentiality obligations are breached.

A forensic consultant preparing demonstrative exhibits for trial should ensure that visual aids:

Answer: Accurately represent the underlying data without distortion

Demonstrative exhibits must accurately and fairly represent the underlying data to maintain credibility and avoid misleading the jury.

How should CFC professionals handle confidential information related to digital forensics & cybercrime?

Answer: Follow established protocols for data protection, access control, and disclosure in accordance with applicable regulations

Confidential information must be handled according to established protocols, regulatory requirements, and professional ethics standards, including proper access control and disclosure procedures.

What does 'back spatter' (blowback) in a gunshot wound indicate about the shooter's position?

Answer: The shooter was at close range in front of the entry wound, as blowback projects toward the muzzle

Back spatter is blood and tissue ejected back through the entry wound toward the muzzle, indicating the shooter was in the direction from which the shot came and was likely within close range.

Gunshot residue (GSR) analysis is used to detect the presence of which elements commonly found in primer residue?

Answer: Lead, barium, and antimony

Traditional GSR analysis (via SEM-EDX) identifies characteristic particles containing lead, barium, and antimony originating from primer ignition.

Mitochondrial DNA (mtDNA) is particularly useful in forensic cases involving which type of evidence?

Answer: Hair shafts without roots, bones, and teeth

mtDNA is found in high copy numbers per cell, making it ideal for analyzing highly degraded or low-template samples like rootless hairs and ancient bones.

Under the CFC Code of Ethics, how should a consultant handle a situation where two clients in the same case have conflicting interests?

Answer: Accept dual representation only if both clients provide written informed consent

Dual representation in a conflicted matter is permissible under CFC ethics only with full disclosure and written informed consent from all affected parties.

When a CFC professional encounters an unfamiliar challenge in bloodstain pattern analysis, what is the recommended first course of action?

Answer: Research applicable standards, consult with subject matter experts, and document the approach

Professional practice requires a methodical approach to unfamiliar challenges: research the applicable standards, consult experts when needed, and document the reasoning for the chosen approach.

Under CFC ethical standards, what is the appropriate response when a colleague behaves unethically during a joint engagement?

Answer: Report the conduct to the appropriate professional body and, if necessary, withdraw from the engagement

Reporting unethical conduct by colleagues is a professional duty; silence can make the observer complicit in the misconduct.

Which phenomenon occurs when a smaller DNA allele is preferentially amplified over a larger allele during PCR, leading to apparent homozygosity?

Answer: Allelic dropout

Allelic dropout occurs when one allele in a heterozygous sample fails to amplify, often due to low template DNA or degradation.

What does 'muzzle-to-target distance' determination in gunshot wound analysis primarily rely on?

Answer: Gunshot residue stippling, soot deposition, and powder tattooing patterns around the wound

Muzzle-to-target distance is estimated by analyzing the distribution of gunshot residue, soot, and stippling (unburned powder) around the wound, which diminish with increasing distance.