MCQ Collection
Semester Exam MCQs
Semester Exam preparation MCQs for university and college students. This section includes subject-wise practice questions, answers, and explanations to help learners prepare for midterm exams, final exams, quizzes, and academic tests.
Choose an option to check your answer.
A.
Document the process and preserve evidence integrity.
B.
Modify original evidence to make analysis easier.
C.
Ignore chain of custody because the case is technical.
D.
Delete unrelated files from the original device.
Show Answer
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling time synchronization.
Choose an option to check your answer.
A.
To support meaningful evidence interpretation during an investigation.
B.
To perform random browsing without authorization.
C.
To replace all legal documentation.
D.
To avoid evidence documentation.
Show Answer
Correct Answer: A. To support meaningful evidence interpretation during an investigation.
Explanation:
The purpose of analysis phase is connected with meaningful evidence interpretation, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
A.
Document the process and preserve evidence integrity.
B.
Modify original evidence to make analysis easier.
C.
Ignore chain of custody because the case is technical.
D.
Delete unrelated files from the original device.
Show Answer
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling legal admissibility.
Choose an option to check your answer.
A.
Standard time references useful for comparing logs from different locations.
B.
File encryption.
C.
Image editing.
D.
Ram expansion.
Show Answer
Correct Answer: A. Standard time references useful for comparing logs from different locations.
Explanation:
UTC timestamps refers to standard time references useful for comparing logs from different locations.
Choose an option to check your answer.
A.
Document the process and preserve evidence integrity.
B.
Modify original evidence to make analysis easier.
C.
Ignore chain of custody because the case is technical.
D.
Delete unrelated files from the original device.
Show Answer
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling analysis phase.
Choose an option to check your answer.
A.
Legal permission or authorization required before collecting certain evidence.
B.
Personal curiosity.
C.
Speed optimization.
D.
File naming.
Show Answer
Correct Answer: A. Legal permission or authorization required before collecting certain evidence.
Explanation:
Search authority refers to legal permission or authorization required before collecting certain evidence.
Choose an option to check your answer.
A.
To support consistent time comparison during an investigation.
B.
To perform file encryption without authorization.
C.
To replace all legal documentation.
D.
To avoid evidence documentation.
Show Answer
Correct Answer: A. To support consistent time comparison during an investigation.
Explanation:
The purpose of utc timestamps is connected with consistent time comparison, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
A.
Documenting methods, findings, limitations, and conclusions.
B.
Secret deletion.
C.
Unrecorded testing.
D.
Password guessing.
Show Answer
Correct Answer: A. Documenting methods, findings, limitations, and conclusions.
Explanation:
Reporting phase refers to documenting methods, findings, limitations, and conclusions.
Choose an option to check your answer.
A.
To support lawful evidence access during an investigation.
B.
To perform personal curiosity without authorization.
C.
To replace all legal documentation.
D.
To avoid evidence documentation.
Show Answer
Correct Answer: A. To support lawful evidence access during an investigation.
Explanation:
The purpose of search authority is connected with lawful evidence access, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
A.
Document the process and preserve evidence integrity.
B.
Modify original evidence to make analysis easier.
C.
Ignore chain of custody because the case is technical.
D.
Delete unrelated files from the original device.
Show Answer
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling utc timestamps.
Choose an option to check your answer.
A.
To support formal investigation documentation during an investigation.
B.
To perform secret deletion without authorization.
C.
To replace all legal documentation.
D.
To avoid evidence documentation.
Show Answer
Correct Answer: A. To support formal investigation documentation during an investigation.
Explanation:
The purpose of reporting phase is connected with formal investigation documentation, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
A.
Document the process and preserve evidence integrity.
B.
Modify original evidence to make analysis easier.
C.
Ignore chain of custody because the case is technical.
D.
Delete unrelated files from the original device.
Show Answer
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling search authority.
