MCQ Collection
Pakistan MCQs
Practice Pakistan questions with answers and explanations.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling hash value.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling digital forensics.
Choose an option to check your answer.
Correct Answer: A. A hashing technique used to detect whether evidence has changed.
Explanation:
MD5/SHA hashing refers to a hashing technique used to detect whether evidence has changed.
Choose an option to check your answer.
Correct Answer: A. The documented history of evidence handling from collection to court presentation.
Explanation:
Chain of custody refers to the documented history of evidence handling from collection to court presentation.
Choose an option to check your answer.
Correct Answer: A. To support integrity checking during an investigation.
Explanation:
The purpose of md5/sha hashing is connected with integrity checking, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. To support evidence tracking during an investigation.
Explanation:
The purpose of chain of custody is connected with evidence tracking, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling md5/sha hashing.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling chain of custody.
Choose an option to check your answer.
Correct Answer: A. Keeping evidence unchanged so that it remains reliable and admissible.
Explanation:
Evidence preservation refers to keeping evidence unchanged so that it remains reliable and admissible.
Choose an option to check your answer.
Correct Answer: A. To support maintaining integrity during an investigation.
Explanation:
The purpose of evidence preservation is connected with maintaining integrity, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling evidence preservation.
Choose an option to check your answer.
Correct Answer: A. A device or method used to prevent changes to original storage media.
Explanation:
Write blocker refers to a device or method used to prevent changes to original storage media.
