MCQ Collection
Semester Exam MCQs
Semester Exam preparation MCQs for university and college students. This section includes subject-wise practice questions, answers, and explanations to help learners prepare for midterm exams, final exams, quizzes, and academic tests.
Choose an option to check your answer.
A.
Document the process and preserve evidence integrity.
B.
Modify original evidence to make analysis easier.
C.
Ignore chain of custody because the case is technical.
D.
Delete unrelated files from the original device.
Show Answer
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling forensic tool validation.
Choose an option to check your answer.
A.
A defined investigative context used to guide evidence questions and methods.
B.
Random browsing.
C.
Unrecorded editing.
D.
Software design only.
Show Answer
Correct Answer: A. A defined investigative context used to guide evidence questions and methods.
Explanation:
Analysis scenario refers to a defined investigative context used to guide evidence questions and methods.
Choose an option to check your answer.
A.
Chain of custody
B.
File compression
C.
Packet routing
D.
Screen capture
Show Answer
Correct Answer: A. Chain of custody
Explanation:
Chain of custody documents evidence handling.
Choose an option to check your answer.
A.
Document the process and preserve evidence integrity.
B.
Modify original evidence to make analysis easier.
C.
Ignore chain of custody because the case is technical.
D.
Delete unrelated files from the original device.
Show Answer
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling image metadata.
Choose an option to check your answer.
A.
A boundary or weakness that affects how forensic results should be interpreted.
B.
Guaranteed perfection.
C.
Legal judgment.
D.
Data ownership.
Show Answer
Correct Answer: A. A boundary or weakness that affects how forensic results should be interpreted.
Explanation:
Tool limitation refers to a boundary or weakness that affects how forensic results should be interpreted.
Choose an option to check your answer.
A.
To support case-focused analysis during an investigation.
B.
To perform random browsing without authorization.
C.
To replace all legal documentation.
D.
To avoid evidence documentation.
Show Answer
Correct Answer: A. To support case-focused analysis during an investigation.
Explanation:
The purpose of analysis scenario is connected with case-focused analysis, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
A.
Investigating devices such as iot systems, routers, or specialized hardware.
B.
Office decoration.
C.
Screen repair.
D.
Document printing.
Show Answer
Correct Answer: A. Investigating devices such as iot systems, routers, or specialized hardware.
Explanation:
Embedded device forensics refers to investigating devices such as IoT systems, routers, or specialized hardware.
Choose an option to check your answer.
A.
To support analysis constraint during an investigation.
B.
To perform guaranteed perfection without authorization.
C.
To replace all legal documentation.
D.
To avoid evidence documentation.
Show Answer
Correct Answer: A. To support analysis constraint during an investigation.
Explanation:
The purpose of tool limitation is connected with analysis constraint, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
A.
Document the process and preserve evidence integrity.
B.
Modify original evidence to make analysis easier.
C.
Ignore chain of custody because the case is technical.
D.
Delete unrelated files from the original device.
Show Answer
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling analysis scenario.
Choose an option to check your answer.
A.
To support embedded evidence analysis during an investigation.
B.
To perform office decoration without authorization.
C.
To replace all legal documentation.
D.
To avoid evidence documentation.
Show Answer
Correct Answer: A. To support embedded evidence analysis during an investigation.
Explanation:
The purpose of embedded device forensics is connected with embedded evidence analysis, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
A.
Document the process and preserve evidence integrity.
B.
Modify original evidence to make analysis easier.
C.
Ignore chain of custody because the case is technical.
D.
Delete unrelated files from the original device.
Show Answer
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling tool limitation.
Choose an option to check your answer.
A.
Volatile data such as RAM and active network connections
B.
Only printed documents
C.
Only archived backups
D.
Only device packaging
Show Answer
Correct Answer: A. Volatile data such as RAM and active network connections
Explanation:
Live volatile evidence may disappear after shutdown.
