Which option best describes the purpose of chain of custody in a forensic investigation?
Correct Answer: A. To support evidence tracking during an investigation.
MCQ Collection
Pakistan MCQs
Practice Pakistan questions with answers and explanations.
A forensic examiner is dealing with md5/sha hashing. Which action is most appropriate?
Correct Answer: A. Document the process and preserve evidence integrity.
A forensic examiner is dealing with chain of custody. Which action is most appropriate?
Correct Answer: A. Document the process and preserve evidence integrity.
In digital forensics, what does ‘Evidence preservation’ mainly refer to?
Correct Answer: A. Keeping evidence unchanged so that it remains reliable and admissible.
Which option best describes the purpose of evidence preservation in a forensic investigation?
Correct Answer: A. To support maintaining integrity during an investigation.
A forensic examiner is dealing with evidence preservation. Which action is most appropriate?
Correct Answer: A. Document the process and preserve evidence integrity.
In digital forensics, what does ‘Write blocker’ mainly refer to?
Correct Answer: A. A device or method used to prevent changes to original storage media.
Which option best describes the purpose of write blocker in a forensic investigation?
Correct Answer: A. To support evidence protection during an investigation.
A forensic examiner is dealing with write blocker. Which action is most appropriate?
Correct Answer: A. Document the process and preserve evidence integrity.
In digital forensics, what does ‘Forensic image’ mainly refer to?
Correct Answer: A. A bit-by-bit copy of storage media used for analysis instead of the original.
Which option best describes the purpose of forensic image in a forensic investigation?
Correct Answer: A. To support exact evidence copy during an investigation.
A forensic examiner is dealing with forensic image. Which action is most appropriate?
Correct Answer: A. Document the process and preserve evidence integrity.