MCQ Collection
Pakistan MCQs
Practice Pakistan questions with answers and explanations.
Choose an option to check your answer.
A.
Attribution and traffic tracing become more difficult
B.
Evidence disappears from all devices
C.
Forensic imaging becomes unnecessary
D.
Hashing becomes invalid
Show Answer
Correct Answer: A. Attribution and traffic tracing become more difficult
Explanation:
Anonymity systems can complicate attribution.
Choose an option to check your answer.
A.
It helps make the investigation more reliable, controlled, and defensible.
B.
It allows the examiner to ignore chain of custody.
C.
It removes the need for legal authority.
D.
It guarantees that all suspects are guilty.
Show Answer
Correct Answer: A. It helps make the investigation more reliable, controlled, and defensible.
Explanation:
Forensic triage supports reliable forensic practice by improving control, accuracy, or defensibility.
Choose an option to check your answer.
A.
Embedded or hardware-level forensics
B.
Social media design
C.
DNS marketing
D.
Office management
Show Answer
Correct Answer: A. Embedded or hardware-level forensics
Explanation:
Specialized embedded or chip-level methods may be needed.
Choose an option to check your answer.
A.
Whether evidence was altered or time zones were misinterpreted
B.
Whether fonts changed
C.
Whether monitor brightness changed
D.
Whether keyboard was cleaned
Show Answer
Correct Answer: A. Whether evidence was altered or time zones were misinterpreted
Explanation:
Unexpected timestamps require validation and timeline review.
Choose an option to check your answer.
A.
Reconstructing user and administrative actions
B.
Changing evidence
C.
Printing posters
D.
Repairing hardware
Show Answer
Correct Answer: A. Reconstructing user and administrative actions
Explanation:
Audit trails can show cloud activity.
Choose an option to check your answer.
A.
Deciding what evidence to collect, in what order, and by which method.
B.
Changing original evidence to make it easier to read.
C.
Deleting irrelevant data before documentation.
D.
Replacing legal authorization with technical skill.
Show Answer
Correct Answer: A. Deciding what evidence to collect, in what order, and by which method.
Explanation:
Evidence acquisition plan means deciding what evidence to collect, in what order, and by which method, and it must be handled with proper documentation and evidence integrity.
Choose an option to check your answer.
A.
Email headers and routing information
B.
Font size only
C.
Screen brightness
D.
File icon
Show Answer
Correct Answer: A. Email headers and routing information
Explanation:
Headers provide routing and origin clues.
Choose an option to check your answer.
A.
To increase confidence through corroboration
B.
To create contradictions intentionally
C.
To avoid documentation
D.
To overwrite evidence
Show Answer
Correct Answer: A. To increase confidence through corroboration
Explanation:
Corroboration improves reliability of findings.
Choose an option to check your answer.
A.
File signature or magic number
B.
Only file name
C.
Screen color
D.
Folder icon
Show Answer
Correct Answer: A. File signature or magic number
Explanation:
File signatures can reveal true file type.
Choose an option to check your answer.
A.
It helps make the investigation more reliable, controlled, and defensible.
B.
It allows the examiner to ignore chain of custody.
C.
It removes the need for legal authority.
D.
It guarantees that all suspects are guilty.
Show Answer
Correct Answer: A. It helps make the investigation more reliable, controlled, and defensible.
Explanation:
Evidence acquisition plan supports reliable forensic practice by improving control, accuracy, or defensibility.
Choose an option to check your answer.
A.
Identifying patterns and outliers
B.
Changing evidence secretly
C.
Removing timestamps
D.
Replacing analysis
Show Answer
Correct Answer: A. Identifying patterns and outliers
Explanation:
Visualization supports interpretation but does not replace analysis.
Choose an option to check your answer.
A.
IoT and embedded forensics
B.
Only paper forensics
C.
Only traditional email
D.
Only office furniture
Show Answer
Correct Answer: A. IoT and embedded forensics
Explanation:
Smart devices are embedded/IoT evidence sources.
