MCQ Collection
Semester Exam MCQs
Semester Exam preparation MCQs for university and college students. This section includes subject-wise practice questions, answers, and explanations to help learners prepare for midterm exams, final exams, quizzes, and academic tests.
Choose an option to check your answer.
A.
To support relationship visualization during an investigation.
B.
To perform software compilation without authorization.
C.
To replace all legal documentation.
D.
To avoid evidence documentation.
Show Answer
Correct Answer: A. To support relationship visualization during an investigation.
Explanation:
The purpose of graphing evidence is connected with relationship visualization, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
A.
Document the process and preserve evidence integrity.
B.
Modify original evidence to make analysis easier.
C.
Ignore chain of custody because the case is technical.
D.
Delete unrelated files from the original device.
Show Answer
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling identification phase.
Choose an option to check your answer.
A.
A specialist who explains technical findings to legal or organizational audiences.
B.
Database administrator only.
C.
Advertising manager.
D.
Casual user.
Show Answer
Correct Answer: A. A specialist who explains technical findings to legal or organizational audiences.
Explanation:
Expert witness refers to a specialist who explains technical findings to legal or organizational audiences.
Choose an option to check your answer.
A.
To support repeatable process during an investigation.
B.
To perform random investigation without authorization.
C.
To replace all legal documentation.
D.
To avoid evidence documentation.
Show Answer
Correct Answer: A. To support repeatable process during an investigation.
Explanation:
The purpose of standard operating procedure is connected with repeatable process, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
A.
Document the process and preserve evidence integrity.
B.
Modify original evidence to make analysis easier.
C.
Ignore chain of custody because the case is technical.
D.
Delete unrelated files from the original device.
Show Answer
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling graphing evidence.
Choose an option to check your answer.
A.
Gathering evidence using approved and documented methods.
B.
Editing original files.
C.
Deleting unused files.
D.
Changing timestamps.
Show Answer
Correct Answer: A. Gathering evidence using approved and documented methods.
Explanation:
Collection phase refers to gathering evidence using approved and documented methods.
Choose an option to check your answer.
A.
To support technical evidence communicator during an investigation.
B.
To perform database administrator only without authorization.
C.
To replace all legal documentation.
D.
To avoid evidence documentation.
Show Answer
Correct Answer: A. To support technical evidence communicator during an investigation.
Explanation:
The purpose of expert witness is connected with technical evidence communicator, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
A.
Document the process and preserve evidence integrity.
B.
Modify original evidence to make analysis easier.
C.
Ignore chain of custody because the case is technical.
D.
Delete unrelated files from the original device.
Show Answer
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling standard operating procedure.
Choose an option to check your answer.
A.
Any system, device, log, file, or service that may contain relevant evidence.
B.
Exam question.
C.
Screen theme.
D.
Paper size.
Show Answer
Correct Answer: A. Any system, device, log, file, or service that may contain relevant evidence.
Explanation:
Data source refers to any system, device, log, file, or service that may contain relevant evidence.
Choose an option to check your answer.
A.
To support controlled evidence acquisition during an investigation.
B.
To perform editing original files without authorization.
C.
To replace all legal documentation.
D.
To avoid evidence documentation.
Show Answer
Correct Answer: A. To support controlled evidence acquisition during an investigation.
Explanation:
The purpose of collection phase is connected with controlled evidence acquisition, not with altering or avoiding evidence procedures.
Choose an option to check your answer.
A.
Document the process and preserve evidence integrity.
B.
Modify original evidence to make analysis easier.
C.
Ignore chain of custody because the case is technical.
D.
Delete unrelated files from the original device.
Show Answer
Correct Answer: A. Document the process and preserve evidence integrity.
Explanation:
Forensic work requires documentation and preservation of evidence integrity, especially when handling expert witness.
Choose an option to check your answer.
A.
Physical documentation used to identify and protect collected devices.
B.
Device decoration.
C.
Network routing.
D.
Software update.
Show Answer
Correct Answer: A. Physical documentation used to identify and protect collected devices.
Explanation:
Evidence bag and label refers to physical documentation used to identify and protect collected devices.
