MCQ Collection
Pakistan MCQs
Practice Pakistan questions with answers and explanations.
Choose an option to check your answer.
Correct Answer: A. To support evidence source discovery during an investigation.
Explanation:
The purpose of identification phase is connected with evidence source discovery, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling app artifacts.
Choose an option to check your answer.
Correct Answer: A. Locally stored web or app data that may reveal previously accessed content.
Explanation:
Cache artifact refers to locally stored web or app data that may reveal previously accessed content.
Choose an option to check your answer.
Correct Answer: A. To support access limitation during an investigation.
Explanation:
The purpose of encryption challenge is connected with access limitation, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Investigating evidence stored or processed in cloud environments.
Explanation:
Cloud forensics refers to investigating evidence stored or processed in cloud environments.
Choose an option to check your answer.
Correct Answer: A. To support stored activity evidence during an investigation.
Explanation:
The purpose of cache artifact is connected with stored activity evidence, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling encryption challenge.
Choose an option to check your answer.
Correct Answer: A. Analyzing email headers, content, attachments, and routing information.
Explanation:
Email forensics refers to analyzing email headers, content, attachments, and routing information.
Choose an option to check your answer.
Correct Answer: A. To support cloud evidence investigation during an investigation.
Explanation:
The purpose of cloud forensics is connected with cloud evidence investigation, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling cache artifact.
Choose an option to check your answer.
Correct Answer: A. Hiding information inside another file or medium.
Explanation:
Steganography refers to hiding information inside another file or medium.
Choose an option to check your answer.
Correct Answer: A. To support persistent storage data during an investigation.
Explanation:
The purpose of non-volatile data is connected with persistent storage data, not with altering or avoiding evidence procedures.
