MCQ Collection
Pakistan MCQs
Practice Pakistan questions with answers and explanations.
Choose an option to check your answer.
Correct Answer: A. To support domain lookup evidence during an investigation.
Explanation:
The purpose of dns artifact is connected with domain lookup evidence, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling volatile data.
Choose an option to check your answer.
Correct Answer: A. Recovering files from raw data using file signatures rather than file system records.
Explanation:
File carving refers to recovering files from raw data using file signatures rather than file system records.
Choose an option to check your answer.
Correct Answer: A. To support system artifact analysis during an investigation.
Explanation:
The purpose of registry analysis is connected with system artifact analysis, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling dns artifact.
Choose an option to check your answer.
Correct Answer: A. Data that remains after power is removed, such as files on a hard drive.
Explanation:
Non-volatile data refers to data that remains after power is removed, such as files on a hard drive.
Choose an option to check your answer.
Correct Answer: A. To support signature-based recovery during an investigation.
Explanation:
The purpose of file carving is connected with signature-based recovery, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling registry analysis.
Choose an option to check your answer.
Correct Answer: A. A fixed-length digital fingerprint used to verify data integrity.
Explanation:
Hash value refers to a fixed-length digital fingerprint used to verify data integrity.
Choose an option to check your answer.
Correct Answer: A. The scientific process of identifying, preserving, analyzing, and presenting digital evidence.
Explanation:
Digital forensics refers to the scientific process of identifying, preserving, analyzing, and presenting digital evidence.
Choose an option to check your answer.
Correct Answer: A. To support integrity verification during an investigation.
Explanation:
The purpose of hash value is connected with integrity verification, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. To support evidence-based investigation during an investigation.
Explanation:
The purpose of digital forensics is connected with evidence-based investigation, not with altering or avoiding evidence procedures.
