The disparity in equipment between federal and local cyber cops is most clearly seen in the inability of most local agencies to do what?

• A. Decipher encrypted computer evidence
• B. Patch zero-day vulnerabilities
• C. Monitor all network traffic
• D. Access government servers

Answer: (A)

The essential distinction here is how encryption protects data and who has the means to defeat it in an investigation. Modern criminals increasingly store and transmit information in encrypted form, so investigators must be able to decipher that data to obtain usable evidence. Federal cyber units typically have cryptanalytic capabilities, access to specialized tools, and strong partnerships with technology companies and other agencies, along with the legal authority to obtain keys or compel cooperation when needed. This combination makes it feasible for them to unlock encrypted computer evidence in many cases.

Local agencies, by contrast, often face tighter budgets, fewer specialized resources, and limited access to the kinds of advanced decryption tools or expert personnel that larger federal teams can deploy. As a result, they are much more likely to encounter encrypted data that they cannot readily decipher, highlighting the disparity between federal and local capabilities in handling encrypted evidence.