Asmall law firm located in the midwest has possibly been breached by a computer hacker who was looking to obtain information on their clientele. the law firm does not have any on-site it employees but wants to search for evidence of the breach themselves to prevent any possible media attention. why would this not be recommended?
a. searching can change date/time stamps
b. searching could possibly crash the machine or device
c. searching creates cache files that would hinder the investigation
d. searching for evidence themselves would not have any ill effects

Suppose you are an ad-serving company and you maintain a log of cookie data for ads you serve to the web pages for a particular vendor (say amazon). a. how can you use this data to determine which are the best ads? b. how can you use this data to determine which are the best ad formats? c. how could you records of past ads and ad clicks to determine which ads to send to a given ip address? d. how could you use this data to determine how well the technique you used in your answer to part c was working? e. how could you use this data to determine that a given ip address is used by more than one person? f. how does having this data give you a competitive advantage vis-à-vis other ad-serving companies?