Computer Hacking Forensic Investigator (CHFI) — Question 51

You are working as Computer Forensics investigator and are called by the owner of an accounting firm to investigate possible computer abuse by one of the firm's employees. You meet with the owner of the firm and discover that the company has never published a policy stating that they reserve the right to inspect their computing assets at will. What do you do?

Answer options

• A. Inform the owner that conducting an investigation without a policy is not a problem because the company is privately owned
• B. Inform the owner that conducting an investigation without a policy is a violation of the 4th amendment
• C. Inform the owner that conducting an investigation without a policy is a violation of the employee's expectation of privacy
• D. Inform the owner that conducting an investigation without a policy is not a problem because a policy is only necessary for government agencies

Correct answer: C

Explanation

The correct answer is C because without a stated policy, employees may have a reasonable expectation of privacy regarding their work-related activities. Options A and D incorrectly suggest that private ownership negates the need for a policy, while option B misinterprets the applicability of the 4th amendment in this context.