Question 100
An eDiscovery set contains communications requesting confidential legal advice from counsel. Which review category needs attention?
- Privilege review
- Search term validation
- Metadata preservation
- Litigation hold
Explanation
Correct Answer
A:Legal privilege review assesses whether protected communications must be withheld or specially handled under applicable rules. The presence of an attorney's name is not, by itself, conclusive.
Incorrect Answers
B:In work concerning effectiveness of a discovery search strategy, search validation checks precision and recall against representative or known material, prompting adjusted terms or methods; the operation would not resolve potentially protected lawyer-client communications. Keyword lists should not be trusted without testing their performance; the distinction leaves potentially protected lawyer-client communications unsettled.
C:A case involving maintaining original document context during export might use this approach: metadata preservation retains context such as creator, dates and file attributes when material to the case; the required result here is potentially protected lawyer-client communications. A transformed readable copy may omit information needed to assess origin or chronology; it cannot replace proof about potentially protected lawyer-client communications.
D:The required finding is about potentially protected lawyer-client communications; a litigation hold suspends ordinary deletion of identified potentially relevant information; this addresses the separate concern of preservation against scheduled deletion. Custodians must understand scope and preservation duties until release; it does not by itself answer potentially protected lawyer-client communications.
Question 101
An examiner has collected a huge company archive but needs only material related to one alleged kickback scheme. Which review goal filters the data?
- Production manifest
- Litigation hold
- Relevance review
- Collection defensibility
Explanation
Correct Answer
C:Relevance review tests documents against factual issues and agreed scope. A document can be authentic and preserved yet have no bearing on the disputed event.
Incorrect Answers
A:The current inquiry asks about whether collected material bears on the allegation; a production manifest or load-file inventory maps document IDs and produced items so recipients can reconcile completeness; this mechanism chiefly addresses reconciling delivered document identifiers. It is separate from an examiner's analytical conclusion; it cannot prove whether collected material bears on the allegation on its own.
B:In an inquiry concerning preservation against scheduled deletion, a litigation hold suspends ordinary deletion of identified potentially relevant information; the scope does not extend to whether collected material bears on the allegation. Custodians must understand scope and preservation duties until release; that issue cannot settle whether collected material bears on the allegation.
D:For the separate question of reproducibility of discovery collection, defensible collection requires repeatable, documented scope and methods so the process can be scrutinized; the requested assessment of whether collected material bears on the allegation remains open. An exported file alone cannot explain why relevant items might be missing; there is no direct finding about whether collected material bears on the allegation.
Question 102
An exported spreadsheet loses modification timestamps and author properties when converted to plain text. What discovery concern does this create?
- Production manifest
- Processing deduplication
- Metadata preservation
- Relevance review
Explanation
Correct Answer
C:Metadata preservation retains context such as creator, dates and file attributes when material to the case. A transformed readable copy may omit information needed to assess origin or chronology.
Incorrect Answers
A:For questions about reconciling delivered document identifiers, a production manifest or load-file inventory maps document IDs and produced items so recipients can reconcile completeness; that differs from maintaining original document context during export. It is separate from an examiner's analytical conclusion; it provides no direct answer to maintaining original document context during export.
B:The stem asks about maintaining original document context during export; deduplication identifies matching items by appropriate content and metadata criteria while preserving custodian relationships; the described operation is used for redundant documents without loss of provenance. It must not erase evidence of who possessed a copy; a determination about maintaining original document context during export requires other support.
D:In work concerning whether collected material bears on the allegation, relevance review tests documents against factual issues and agreed scope; the operation would not resolve maintaining original document context during export. A document can be authentic and preserved yet have no bearing on the disputed event; the distinction leaves maintaining original document context during export unsettled.
Question 103
A reviewer must inspect cell formulas and hidden worksheet content rather than a flat PDF rendering. Which production form is appropriate?
- Relevance review
- Native production
- Processing deduplication
- Custodian identification
Explanation
Correct Answer
B:Native production supplies the source application's file format so underlying structure and formulas can be examined. Protective measures may still be needed for unrelated hidden data.
Incorrect Answers
A:For an analysis centered on whether collected material bears on the allegation, relevance review tests documents against factual issues and agreed scope; the present need is access to spreadsheet formulas and internal structure. A document can be authentic and preserved yet have no bearing on the disputed event; a different finding about access to spreadsheet formulas and internal structure is still needed.
C:The current inquiry asks about access to spreadsheet formulas and internal structure; deduplication identifies matching items by appropriate content and metadata criteria while preserving custodian relationships; this mechanism chiefly addresses redundant documents without loss of provenance. It must not erase evidence of who possessed a copy; it cannot prove access to spreadsheet formulas and internal structure on its own.
D:In an inquiry concerning finding people and systems holding responsive records, custodian identification maps likely holders, repositories and communication channels; the scope does not extend to access to spreadsheet formulas and internal structure. Searching every employee account without this step can be costly and disproportionate; that issue cannot settle access to spreadsheet formulas and internal structure.
Question 104
A proposed keyword filter is tested against known relevant files and unexpectedly misses most of them. Which discovery step addresses the failure?
- Relevance review
- Custodian identification
- Search term validation
- Metadata preservation
- Production manifest
Explanation
Correct Answer
C:Search validation checks precision and recall against representative or known material, prompting adjusted terms or methods. Keyword lists should not be trusted without testing their performance.
Incorrect Answers
A:For a separate investigation of whether collected material bears on the allegation, relevance review tests documents against factual issues and agreed scope; that is not the determination of effectiveness of a discovery search strategy in the stem. A document can be authentic and preserved yet have no bearing on the disputed event; the evidence still must speak to effectiveness of a discovery search strategy.
B:With effectiveness of a discovery search strategy as the investigative issue, custodian identification maps likely holders, repositories and communication channels; the result would concern finding people and systems holding responsive records. Searching every employee account without this step can be costly and disproportionate; this would not resolve effectiveness of a discovery search strategy.
D:The stem asks about effectiveness of a discovery search strategy; metadata preservation retains context such as creator, dates and file attributes when material to the case; the described operation is used for maintaining original document context during export. A transformed readable copy may omit information needed to assess origin or chronology; a determination about effectiveness of a discovery search strategy requires other support.
E:Instead of a method addressing effectiveness of a discovery search strategy, a production manifest or load-file inventory maps document IDs and produced items so recipients can reconcile completeness; this one concerns reconciling delivered document identifiers. It is separate from an examiner's analytical conclusion; it cannot independently determine effectiveness of a discovery search strategy.
Question 105
An opposing party receives 2,000 documents and needs a reliable list of identifiers and delivered files. Which deliverable supports verification?
- Relevance review
- Custodian identification
- Processing deduplication
- Production manifest
- Search term validation
Explanation
Correct Answer
D:A production manifest or load-file inventory maps document IDs and produced items so recipients can reconcile completeness. It is separate from an examiner's analytical conclusion.
Incorrect Answers
A:The required finding is about reconciling delivered document identifiers; relevance review tests documents against factual issues and agreed scope; this addresses the separate concern of whether collected material bears on the allegation. A document can be authentic and preserved yet have no bearing on the disputed event; it does not by itself answer reconciling delivered document identifiers.
B:Although the case asks about reconciling delivered document identifiers, custodian identification maps likely holders, repositories and communication channels; the action instead concerns finding people and systems holding responsive records. Searching every employee account without this step can be costly and disproportionate; it does not establish reconciling delivered document identifiers.
C:For an analysis centered on redundant documents without loss of provenance, deduplication identifies matching items by appropriate content and metadata criteria while preserving custodian relationships; the present need is reconciling delivered document identifiers. It must not erase evidence of who possessed a copy; a different finding about reconciling delivered document identifiers is still needed.
E:The current inquiry asks about reconciling delivered document identifiers; search validation checks precision and recall against representative or known material, prompting adjusted terms or methods; this mechanism chiefly addresses effectiveness of a discovery search strategy. Keyword lists should not be trusted without testing their performance; it cannot prove reconciling delivered document identifiers on its own.
Question 106
A client demands that an expert omit evidence inconsistent with its preferred narrative. Which professional obligation must prevail?
- Duty of impartiality
- Preservation of workpapers
- Courtroom candor
- Conflict-of-interest disclosure
Explanation
Correct Answer
A:Impartiality requires evidence-based reporting of material findings and contrary indications. A retained expert may be paid for analysis but should not make conclusions contingent on client preference.
Incorrect Answers
B:The objective here is independent findings despite client pressure; retention of workpapers, logs and intermediate results according to case policy supports reproducibility and disclosure; the option would instead inform retention of supporting examination records. Deletion may obstruct review of how a conclusion was reached; it is not direct evidence of independent findings despite client pressure.
C:For a separate investigation of correction of an overstated forensic capability, candor requires correcting overstatements and explaining validated limitations; that is not the determination of independent findings despite client pressure in the stem. A finding from one tool cannot establish that every possible hidden or encrypted object was detected; the evidence still must speak to independent findings despite client pressure.
D:With independent findings despite client pressure as the investigative issue, disclosing material conflicts lets the tribunal or client assess independence and decide safeguards; the result would concern identification of financial interests affecting impartiality. Concealment can erode credibility even if the technical methods are sound; this would not resolve independent findings despite client pressure.
Question 107
A recovered log has missing dates and unknown clock drift, yet the draft report assigns exact event times. Which ethical requirement is at issue?
- Method transparency
- Disclosure of limitations
- Competence boundary
- Courtroom candor
Explanation
Correct Answer
B:Experts should disclose missing data and timing uncertainty rather than give unsupported precision. Limitations affect how strongly a timeline can be relied upon.
Incorrect Answers
A:In work concerning reviewable description of forensic examination methods, method transparency documents tools, versions, procedures and testing enough for meaningful review; the operation would not resolve accurate communication of evidentiary uncertainty. Proprietary components may require controlled disclosure, but conclusory claims alone are weak; the distinction leaves accurate communication of evidentiary uncertainty unsettled.
C:The required finding is about accurate communication of evidentiary uncertainty; professional competence means working within demonstrated expertise and seeking a qualified examiner for specialized methods; this addresses the separate concern of testimony within actual technical expertise. Familiarity with one platform does not validate conclusions on another; it does not by itself answer accurate communication of evidentiary uncertainty.
D:Although the case asks about accurate communication of evidentiary uncertainty, candor requires correcting overstatements and explaining validated limitations; the action instead concerns correction of an overstated forensic capability. A finding from one tool cannot establish that every possible hidden or encrypted object was detected; it does not establish accurate communication of evidentiary uncertainty.
Question 108
An analyst experienced with Windows disks is asked to testify definitively about an unfamiliar chip-off mobile extraction. What is the responsible response?
- Courtroom candor
- Competence boundary
- Preservation of workpapers
- Evidence contamination disclosure
Explanation
Correct Answer
B:Professional competence means working within demonstrated expertise and seeking a qualified examiner for specialized methods. Familiarity with one platform does not validate conclusions on another.
Incorrect Answers
A:In an inquiry concerning correction of an overstated forensic capability, candor requires correcting overstatements and explaining validated limitations; the scope does not extend to testimony within actual technical expertise. A finding from one tool cannot establish that every possible hidden or encrypted object was detected; that issue cannot settle testimony within actual technical expertise.
C:For the separate question of retention of supporting examination records, retention of workpapers, logs and intermediate results according to case policy supports reproducibility and disclosure; the requested assessment of testimony within actual technical expertise remains open. Deletion may obstruct review of how a conclusion was reached; there is no direct finding about testimony within actual technical expertise.
D:The objective here is testimony within actual technical expertise; unexpected alterations must be documented with affected paths and timestamps, and their relevance evaluated; the option would instead inform transparent recording of investigator-caused changes. Concealing them would impair the reliability of later artifact interpretation; it is not direct evidence of testimony within actual technical expertise.
Question 109
A forensic report describes a proprietary process but gives no repeatable steps or validation record. Which obligation is most directly weakened?
- Disclosure of limitations
- Method transparency
- Courtroom candor
- Duty of impartiality
Explanation
Correct Answer
B:Method transparency documents tools, versions, procedures and testing enough for meaningful review. Proprietary components may require controlled disclosure, but conclusory claims alone are weak.
Incorrect Answers
A:The stem asks about reviewable description of forensic examination methods; experts should disclose missing data and timing uncertainty rather than give unsupported precision; the described operation is used for accurate communication of evidentiary uncertainty. Limitations affect how strongly a timeline can be relied upon; a determination about reviewable description of forensic examination methods requires other support.
C:In work concerning correction of an overstated forensic capability, candor requires correcting overstatements and explaining validated limitations; the operation would not resolve reviewable description of forensic examination methods. A finding from one tool cannot establish that every possible hidden or encrypted object was detected; the distinction leaves reviewable description of forensic examination methods unsettled.
D:A case involving independent findings despite client pressure might use this approach: impartiality requires evidence-based reporting of material findings and contrary indications; the required result here is reviewable description of forensic examination methods. A retained expert may be paid for analysis but should not make conclusions contingent on client preference; it cannot replace proof about reviewable description of forensic examination methods.
Question 110
An examiner owns shares in a vendor whose product failed in the case and is asked for a neutral opinion. Which ethical control is appropriate?
- Conflict-of-interest disclosure
- Independent verification
- Preservation of workpapers
- Duty of impartiality
Explanation
Correct Answer
A:Disclosing material conflicts lets the tribunal or client assess independence and decide safeguards. Concealment can erode credibility even if the technical methods are sound.
Incorrect Answers
B:The current inquiry asks about identification of financial interests affecting impartiality; independent verification of source files and hash calculations supports the expert's conclusions; this mechanism chiefly addresses personal substantiation of a material technical claim. Reliance on unverified hearsay about technical results increases error risk; it cannot prove identification of financial interests affecting impartiality on its own.
C:In an inquiry concerning retention of supporting examination records, retention of workpapers, logs and intermediate results according to case policy supports reproducibility and disclosure; the scope does not extend to identification of financial interests affecting impartiality. Deletion may obstruct review of how a conclusion was reached; that issue cannot settle identification of financial interests affecting impartiality.
D:Even though the scenario needs identification of financial interests affecting impartiality, impartiality requires evidence-based reporting of material findings and contrary indications; the action relates to independent findings despite client pressure. A retained expert may be paid for analysis but should not make conclusions contingent on client preference; this remains insufficient for identification of financial interests affecting impartiality.