MCQ Collection
Pakistan MCQs
Practice Pakistan questions with answers and explanations.
Choose an option to check your answer.
Correct Answer: A. To support traffic monitoring during an investigation.
Explanation:
The purpose of packet sniffing in forensics is connected with traffic monitoring, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling dead acquisition.
Choose an option to check your answer.
Correct Answer: A. Reconstructing events based on timestamps and system artifacts.
Explanation:
Timeline analysis refers to reconstructing events based on timestamps and system artifacts.
Choose an option to check your answer.
Correct Answer: A. To support storage structure examination during an investigation.
Explanation:
The purpose of file system analysis is connected with storage structure examination, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling packet sniffing in forensics.
Choose an option to check your answer.
Correct Answer: A. Data that may be lost when power is removed, such as ram contents.
Explanation:
Volatile data refers to data that may be lost when power is removed, such as RAM contents.
Choose an option to check your answer.
Correct Answer: A. To support event reconstruction during an investigation.
Explanation:
The purpose of timeline analysis is connected with event reconstruction, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling file system analysis.
Choose an option to check your answer.
Correct Answer: A. Records showing domain lookups that may reveal accessed services.
Explanation:
DNS artifact refers to records showing domain lookups that may reveal accessed services.
Choose an option to check your answer.
Correct Answer: A. To support temporary system data during an investigation.
Explanation:
The purpose of volatile data is connected with temporary system data, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling timeline analysis.
Choose an option to check your answer.
Correct Answer: A. Examining windows registry artifacts to identify user and system activity.
Explanation:
Registry analysis refers to examining Windows registry artifacts to identify user and system activity.
