Computer Hacking Forensic Investigator (CHFI v10) — Question 470

You are working as Computer Forensics investigator and are called by the owner of an accounting firm to investigate possible computer abuse by one of the firm's employees. You meet with the owner of the firm and discover that the company has never published a policy stating that they reserve the right to inspect their computing assets at will. What do you do?

Answer options

• A. Inform the owner that conducting an investigation without a policy is not a problem because the company is privately owned
• B. Inform the owner that conducting an investigation without a policy is a violation of the 4th amendment
• C. Inform the owner that conducting an investigation without a policy is a violation of the employee's expectation of privacy
• D. Inform the owner that conducting an investigation without a policy is not a problem because a policy is only necessary for government agencies

Correct answer: C

Explanation

The correct answer is C because employees have a reasonable expectation of privacy in their work communications and activities, which can be violated without a clear policy. Options A and D are incorrect as they misrepresent the legal requirements for private companies. Option B is also incorrect because the 4th amendment primarily pertains to government actions, not private entities.