MCQ Collection
Semester Exam MCQs
Semester Exam preparation MCQs for university and college students. This section includes subject-wise practice questions, answers, and explanations to help learners prepare for midterm exams, final exams, quizzes, and academic tests.
Choose an option to check your answer.
A.
It helps make the investigation more reliable, controlled, and defensible.
B.
It allows the examiner to ignore chain of custody.
C.
It removes the need for legal authority.
D.
It guarantees that all suspects are guilty.
Show Answer
Correct Answer: A. It helps make the investigation more reliable, controlled, and defensible.
Explanation:
Case documentation supports reliable forensic practice by improving control, accuracy, or defensibility.
Choose an option to check your answer.
A.
Digital forensic readiness
B.
Data wiping
C.
Format string bug
D.
Packet spoofing
Show Answer
Correct Answer: A. Digital forensic readiness
Explanation:
Readiness prepares the organization for future investigations.
Choose an option to check your answer.
A.
Loss of evidence control and credibility
B.
Better legal admissibility
C.
Automatic validation
D.
Faster court approval
Show Answer
Correct Answer: A. Loss of evidence control and credibility
Explanation:
Poor labeling damages evidence management.
Choose an option to check your answer.
A.
A documented live response procedure
B.
Uncontrolled shutdown
C.
Random deletion
D.
Silent evidence editing
Show Answer
Correct Answer: A. A documented live response procedure
Explanation:
Live response should be planned and documented.
Choose an option to check your answer.
A.
To reduce risk to production systems
B.
To infect the whole network
C.
To bypass all laws
D.
To destroy evidence
Show Answer
Correct Answer: A. To reduce risk to production systems
Explanation:
Isolation helps safely observe suspicious behavior.
Choose an option to check your answer.
A.
Regulatory compliance
B.
Disk defragmentation
C.
Screen capture
D.
File carving
Show Answer
Correct Answer: A. Regulatory compliance
Explanation:
Breach notification is a compliance matter.
Choose an option to check your answer.
A.
File system metadata and recovered remnants
B.
Monitor size only
C.
Keyboard brand only
D.
Cable color only
Show Answer
Correct Answer: A. File system metadata and recovered remnants
Explanation:
Metadata and remnants can support file existence.
Choose an option to check your answer.
A.
Hash verification and chain-of-custody records
B.
Personal opinion only
C.
Screen theme
D.
Keyboard brand
Show Answer
Correct Answer: A. Hash verification and chain-of-custody records
Explanation:
Integrity and custody documentation support reliability.
Choose an option to check your answer.
A.
Metadata, file structure, timestamps, and visual inconsistencies
B.
Only the file icon
C.
Only keyboard model
D.
Only power cable
Show Answer
Correct Answer: A. Metadata, file structure, timestamps, and visual inconsistencies
Explanation:
Multimedia evidence requires technical and content examination.
Choose an option to check your answer.
A.
Platform records, account logs, screenshots, and metadata
B.
Only a verbal statement
C.
Only wallpaper
D.
Only device color
Show Answer
Correct Answer: A. Platform records, account logs, screenshots, and metadata
Explanation:
Social media evidence should be corroborated across sources.
Choose an option to check your answer.
A.
Privacy and scope limitation
B.
Unrestricted collection
C.
Evidence destruction
D.
Random analysis
Show Answer
Correct Answer: A. Privacy and scope limitation
Explanation:
Investigators should stay within legal authority and scope.
Choose an option to check your answer.
A.
Tool limitation
B.
Evidence certainty
C.
Legal proof
D.
Automatic innocence
Show Answer
Correct Answer: A. Tool limitation
Explanation:
Tool limitations must be documented.
